Snapchat - Image re...
 
Notifications
Clear all

Snapchat - Image retrieval

7 Posts
6 Users
0 Likes
1,815 Views
(@langers01)
Posts: 2
New Member
Topic starter
 

Hi,

Has anybody had any luck with extracting images from the Snapchat application where the image/video hasn't been saved by the sender?

Thanks

Amanda

 
Posted : 12/11/2013 4:49 pm
(@sukeban)
Posts: 4
New Member
 

Have you seen this?

http//www.ksl.com/?sid=25106057

It might help you.

 
Posted : 12/11/2013 6:10 pm
(@gharti)
Posts: 8
Active Member
 

It is possible to save the unviewed images.
The newest version of the SnapChat-App encrypt the images.
But you can easily decrypt them.
The App use an AES 128bit encryption algorithm with a 16 char long key.

For more information take a look at this article…

http//www.experts4handys.de/?p=575

If you want more detailed infos feel free to ask me.

 
Posted : 04/02/2014 1:21 am
(@thepm)
Posts: 253
Reputable Member
 

Great info, thanks! Wish the post was in English though… ) Google Translate kinda did the job.

Did you post your decryption code somewhere?

 
Posted : 04/02/2014 6:34 pm
(@dcs1094)
Posts: 146
Estimable Member
 

I 2nd PM_SQ's comments! Interesting read, good work gharti! )

 
Posted : 04/02/2014 9:04 pm
(@marshalm)
Posts: 1
New Member
 

Hello All,

We've had a few cases in recently with snapchat. I found a ruby script that would decrypt the encrypted images and movies and then just edited it a bit to parse through a folder to decrypt and rename the files for viewing. The script is as follows-

#!/usr/bin/env ruby

require 'openssl'

exts=[".jpg.nomedia",".jpg.DELETED.nomedia",".mp4.nomedia",".mp4.DELETED.nomedia"]
repext=[".jpg",".jpg",".mp4",".mp4"]
for i in 0..3
snapchat= Dir["*" + exts]
snapchat.each {|filename|
fname=File.basename(filename,exts)
puts fname+exts
begin
data = File.open(filename, 'rASCII-8BIT').read
c = OpenSSLCipher.new('AES-128-ECB')
c.decrypt
c.key = 'M02cnQ51Ji97vwT4'
o = ''.force_encoding('ASCII-8BIT')
data.bytes.each_slice(16) { |s| o += c.update(s.map(&chr).join) }
o += c.final
File.open(fname+repext, 'w') { |f| f.write(o) }
puts "Successfully decrypted ", fname+exts
rescue
puts "Failed on decrypt for file ", fname+exts
next
end
}
end

For some reason this works fine on my Linux install of Ruby but won't work on the Windows install of Ruby - on the plus side it has at least justified my purchase of a Raspberry Pi !!

Hope this helps,

Rich Morris - Cumbria Constabulary Hi-Tech Unit

 
Posted : 05/02/2014 3:42 pm
(@gharti)
Posts: 8
Active Member
 

And here is my little program in Java for decrypting a single picture

// Example code showing SnapChat JPG decryption
// for the unseen stored pictures

import java.awt.image.BufferedImage;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import javax.crypto.Cipher;
import javax.crypto.CipherInputStream;
import javax.crypto.spec.SecretKeySpec;
import javax.imageio.ImageIO;

public class sample {

public static void main(String[] arg) throws Exception {

//The 16 char AES key
String b = "M02cnQ51Ji97vwT4";

{

Cipher scCipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
scCipher.init(2, new SecretKeySpec(b.getBytes(), "AES"));

FileInputStream output = new FileInputStream("D\\Temp\\Crypt\\h1a81hurcs00h1390749911195.jpg");
CipherInputStream cis = new CipherInputStream(output, scCipher);
BufferedImage input1 = ImageIO.read(cis);
FileOutputStream out = new FileOutputStream("D\\Temp\\Crypt\\SnapChat_decrypted_file_01.jpg");
ImageIO.write(input1,"JPG", out);
cis.close();

}
}
}

Hope we can find a way to rescue the viewed and deleted Pictures…

 
Posted : 05/02/2014 5:58 pm
Share: