wellrodrig / Whatsapp-Spy

WhatsApp Spy is an app designed to monitor and log all on-screen texts whenever a user opens WhatsApp / Whatsapp Business. It also supports Instagram and Messenger, sending logs to either Discord or Telegram, without port forwarding.
28 stars 3 forks source link
accessibility-service accessibility-testing android android-keylogger android-security api apk discord keylogger logging rat spyware telegram webhook whatsapp

GitHub Repo stars GitHub forks GitHub followers

WARNING

[!CAUTION] This open-source project is intended for educational and research purposes only. By using this software, you acknowledge and agree that:

  • User Responsibility: You, the user, bear full responsibility for how you utilize this software.
  • Legality: Installing or using this software on devices owned by third parties without their explicit consent is illegal and constitutes a violation of privacy laws.

Features

✔️ full launcher stealth with no app icon on the home screen or launcher

✔️ one a a kind custom buffers for improved logging readability

✔️ sends notifications even while in a locked state (grabs google code before owner sees it) - (Optimized the code from the original project for better performance (read more at references.)

✔️ grabs all text on the screen the user is looking at. (except images)

✔️ keylogs all user input, even external and remote keyboards

✔️ Logs the text within message balloons whenever the user clicks on them (such as when long-pressing to reply or forward the message).

✔️ Works on Whatsapp/Whatsapp Business, Instagram and Messenger

✔️ You can choose to send logs either through Discord webhooks or the Telegram API.

Instalation

  1. Telegram:

    • Download APK file.
    • To decompile the APK, open it in an APK Editor like APKToolGUI or APK Editor Studio.
    • Open the decompilation folder and find the file named MyAccessibilityService$MessageSender.smali.
    • Search for a file TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID and replace it with your correspondent bot token and chat ID.
    • Compile and sign apk.
    • Install on target device.
    • You must enable it in the accessibility settings.
  2. Discord:

    • Download APK file.
    • To decompile the APK, open it in an APK Editor like APKToolGUI or APK Editor Studio.
    • Open the decompilation folder and find the file named MyAccessibilityService$MessageSender.smali.
    • Search for YOUR_DISCORD_WEBHOOK_URL and replace it with your correspondent BOT URL you got it from Discord.
    • Compile and sign apk.
    • Install on target device.
    • You must enable it in the accessibility settings.

If everything went ok, you should receive on discord or telegram chat a message containing some data of the cellphone that the app was installed on.

Image of a whatsapp chat

Images

Image of a whatsapp chat Exemple of how it displays on discord using webhook Exemple of how it displays on Telegram API How it looks when the user taps on a text balloon

References

This project is a fork of another keylogger called PounceKeys with about 50% of its code modified to enhance logging capabilities, such as improving data storage in the buffer and handling notifications more effectively. The current version of MyAccessibilityServices has grown by approximately 120 lines, with a focus on social media platforms like WhatsApp and Instagram. The APK and source code are currently unavailable as I am making ongoing adjustments, but they will be released soon. However, I am uncertain about the project's long-term viability, as the original project, PounceKeys, remains highly active (sort of). Depending on how this goes, I'll be implementing some features, which I'll discuss in the next section.

Roadmap