whatsapp crypt5

General (Technical, Procedural, Software, Hardware etc.)

Last Post by Ateloy 12 years ago

6 Posts

4 Users

0 Reactions

1,940 Views

RSS

Anonymous

(@Anonymous)

Joined: 1 second ago

Posts: 0

Topic starter 06/04/2014 7:53 pm [#11654]

hi all, ever since facebook changed its encryption last month to crypt5, it's not possible anymore to decrypt the file msgstore.db.crypt5, before the change it was msgstore.db.crypt.
has anyone found a way to decrypt to msgstore.db?
I have a case which I need to open these messages, appreciate any help.

thnaks in advance.

Gabriel

Quote

bkerler

(@bkerler)

New Member

Joined: 15 years ago

Posts: 2

07/04/2014 5:51 pm

Sure.

http//github.com/aramosf/pwncrypt5/blob/master/pwncrypt5.py

using python pwncrypt5.py database.crypt5 [email protected] > decrypted.db

Except files with .crypt6, there the key will be stored at /data/data/com.whatsapp/files/key and encryption is different.

ReplyQuote

theraven1982

(@theraven1982)

New Member

Joined: 12 years ago

Posts: 1

07/04/2014 7:18 pm

I had some trouble getting this to work under Windows; in Linux it works fine. In Windows the decryption seemed ok (no error messages, and when I view the raw contents in the decrypted file I can see the tablenames and messages), but I couldn't open the resulting DB file in sqlitebrowser. This was with (as far as I know) the latest version of M2Crypto.

Good luck,

ReplyQuote

Anonymous

(@Anonymous)

Joined: 1 second ago

Posts: 0

Topic starter 08/04/2014 4:42 pm

Sure.

http//github.com/aramosf/pwncrypt5/blob/master/pwncrypt5.py

using python pwncrypt5.py database.crypt5 [email protected] > decrypted.db

Except files with .crypt6, there the key will be stored at /data/data/com.whatsapp/files/key and encryption is different.

thanks will have a look at it.

ReplyQuote

Anonymous

(@Anonymous)

Joined: 1 second ago

Posts: 0

Topic starter 08/04/2014 4:49 pm

I had some trouble getting this to work under Windows; in Linux it works fine. In Windows the decryption seemed ok (no error messages, and when I view the raw contents in the decrypted file I can see the tablenames and messages), but I couldn't open the resulting DB file in sqlitebrowser. This was with (as far as I know) the latest version of M2Crypto.

Good luck,

hi, thanks for your reply, i downloade the M2Crypto in my windows ran the setup and nothing is happening, could you elaborate as how do I use this?

ReplyQuote