Los enlaces son solo para miembros. Registrate o iniciá sesión
<br /><br />Hello underc0de users! Today I'm going to show you a tool that I found while browsing the internet. The tool is used to decrypt the WhatsApp database that is in the WhatsApp folder. Well, we copy the msgstore.db.crypt file since it contains all the conversations.<br /><br />-We paste the msgstore.db.crypt file into the tool's folder.<br /><br />-Then we open the tool and you simply select android or iphone and then you have to click Decrypter! and that's it, everything comes out!<br /><br />Re-uploaded link! Los enlaces son solo para miembros. Registrate o iniciá sesión🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
Hellooo<br /><br />I was testing the method and I can't get it to work, I followed your instructions and the ones contained in the rar and I can't decrypt the database. Initially my file is called "msgstore.db.crypt5" and I paste it into the Whatsapp recovery folder and open the program, when I click "Android" and decrypt I get an error.<br /><br />It says that some necessary file is missing or that the "msgstore" file is not found.<br /><br />How did you solve this error?<br />
Cita de: Squirtle en Marzo 02, 2014, 01:10:00 PM<br />Hellooo<br /><br />I was testing the method and I can't get it to work, I followed your instructions and the ones contained in the rar and I can't decrypt the database. Initially my file is called "msgstore.db.crypt5" and I paste it into the Whatsapp recovery folder and open the program, when I click "Android" and decrypt I get an error.<br /><br />It says that some necessary file is missing or that the "msgstore" file is not found.<br /><br />How did you solve this error?<br />The error is that it's not the correct file, look in the Whatsapp folder, several files will appear and you have to choose the one that is msgstore.db and paste it into the tool's folder! Try it and let me know
I already did that, even when I paste the "msgstore.db." into the folder it automatically renames it to "msgstore.db.crypt5". I deleted the "5" to see if it worked and nothing.<br /><br />I don't know if it has to do with the phone model, but I suppose not because it's android.<br /><br />
The problem is that with the latest WhatsApp updates the database has gone from being called crypt to crypt5, and it seems they have nothing to do with each other, whatsapp xtract also doesn't work with crypt5 files, an updated tool is needed
If an updated tool is needed, it's advisable for the person who needs it to code it themselves or modify the existing ones.<br /><br />Regards,<br />Snifer<br />
Cita de: Snifer en Marzo 10, 2014, 05:54:14 PM<br />If an updated tool is needed, it's advisable for the person who needs it to code it themselves or modify the existing ones.<br /><br />Regards,<br />Snifer<br /><br />Then some tests would have to be done with the crypt5 files, they're supposed to have a better encryption method and especially knowing that telegram is biting at their heels.
In the end I had found a page that decrypted the "crypt5".<br /><br />PS: So I didn't complicate myself that much.<br /><br />Regards
and what is that page?
Cita de: TEX en Abril 07, 2014, 11:43:00 AM<br />and what is that page?<br /><br /><br />The recommended page to use is: Los enlaces son solo para miembros. Registrate o iniciá sesión<br />And the script for crypt5 (source: SbD)<br />
#!/usr/bin/python <br />"""<br />48bits presents:<br />8===============================================D~~~<br />WhatsApp msgstore crypt5 decryptor by grbnz0 and nullsub<br />8===============================================D~~~<br /> <br />"""<br /> <br />import sys<br />import hashlib<br />import StringIO<br />from M2Crypto import EVP<br /> <br />key = bytearray([141, 75, 21, 92, 201, 255, 129, 229, 203, 246, 250, <br /> 120, 25, 54, 106, 62, 198, 33, 166, 86, 65, 108, 215, 147])<br />iv = bytearray([0x1E,0x39,0xF3,0x69,0xE9,0xD,0xB3,0x3A,0xA7,0x3B,0x44,<br /> 0x2B,0xBB,0xB6,0xB0,0xB9])<br /> <br />def decrypt(db,acc):<br /> fh = file(db,'rb')<br /> edb = fh.read()<br /> fh.close()<br /> m = hashlib.md5()<br /> m.update(acc)<br /> md5 = bytearray(m.digest())<br /> for i in xrange(24): key[i] ^= md5[i&0xF]<br /> cipher = EVP.Cipher('aes_192_cbc', key=key, iv=iv, op=0)<br /> sys.stdout.write(cipher.update(edb))<br /> sys.stdout.write(cipher.final())<br /> <br />if __name__ == '__main__':<br /> if len(sys.argv) != 3:<br /> print 'usage %s <db> <accountname> > decrypted.db' % sys.argv[0]<br /> else:<br /> decrypt(sys.argv[1],sys.argv[2])