Snapchat - Image retrieval

Have you seen this?

http//www.ksl.com/?sid=25106057

It might help you.

It is possible to save the unviewed images.
The newest version of the SnapChat-App encrypt the images.
But you can easily decrypt them.
The App use an AES 128bit encryption algorithm with a 16 char long key.

For more information take a look at this article…

http//www.experts4handys.de/?p=575

If you want more detailed infos feel free to ask me.

Great info, thanks! Wish the post was in English though… ) Google Translate kinda did the job.

Did you post your decryption code somewhere?

I 2nd PM_SQ's comments! Interesting read, good work gharti! )

Hello All,

We've had a few cases in recently with snapchat. I found a ruby script that would decrypt the encrypted images and movies and then just edited it a bit to parse through a folder to decrypt and rename the files for viewing. The script is as follows-

#!/usr/bin/env ruby

require 'openssl'

exts=[".jpg.nomedia",".jpg.DELETED.nomedia",".mp4.nomedia",".mp4.DELETED.nomedia"]
repext=[".jpg",".jpg",".mp4",".mp4"]
for i in 0..3
snapchat= Dir["*" + exts]
snapchat.each {|filename|
fname=File.basename(filename,exts)
puts fname+exts
begin
data = File.open(filename, 'rASCII-8BIT').read
c = OpenSSLCipher.new('AES-128-ECB')
c.decrypt
c.key = 'M02cnQ51Ji97vwT4'
o = ''.force_encoding('ASCII-8BIT')
data.bytes.each_slice(16) { |s| o += c.update(s.map(&chr).join) }
o += c.final
File.open(fname+repext, 'w') { |f| f.write(o) }
puts "Successfully decrypted ", fname+exts
rescue
puts "Failed on decrypt for file ", fname+exts
next
end
}
end

Rich Morris - Cumbria Constabulary Hi-Tech Unit

And here is my little program in Java for decrypting a single picture

// Example code showing SnapChat JPG decryption
// for the unseen stored pictures

import java.awt.image.BufferedImage;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import javax.crypto.Cipher;
import javax.crypto.CipherInputStream;
import javax.crypto.spec.SecretKeySpec;
import javax.imageio.ImageIO;

public class sample {

public static void main(String[] arg) throws Exception {

//The 16 char AES key
String b = "M02cnQ51Ji97vwT4";

{

Cipher scCipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
scCipher.init(2, new SecretKeySpec(b.getBytes(), "AES"));

FileInputStream output = new FileInputStream("D\\Temp\\Crypt\\h1a81hurcs00h1390749911195.jpg");
CipherInputStream cis = new CipherInputStream(output, scCipher);
BufferedImage input1 = ImageIO.read(cis);
FileOutputStream out = new FileOutputStream("D\\Temp\\Crypt\\SnapChat_decrypted_file_01.jpg");
ImageIO.write(input1,"JPG", out);
cis.close();

}
}
}

Hope we can find a way to rescue the viewed and deleted Pictures…