yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] Six2014:
sorry but I used a translator

Hello everyone and congratulations for the development you are doing to encrypt the file of whatsapp .

However, I believe that many of you do not want to see the messages in your profile whatsapp (since you have them on the phone) but being able to read the messages of a friend .

I am very sincere and for this I would like to tell you that I also read messages by one person only who are far behind and can not seem to find a way to be able to have.

I have a lot of data in my possession, although I can not physically have the phone of the person.

the data in my possession are:

user and password for gmail ( where i can see email, imei, sms, CallLog, google drive cloud and install app from pc to phone but not configure )

user and password of facebook

tel number , personal information, IMEI code of the phone, ip addresses and phone of his personal computer.

Is it possible that with all these data are not able to have the file msgstore ?

Can you help me and tell me how can I do?

I tried it once with the app whatsbackfree I saved the file on google drive cloud but even if the app is installed I can not set it up and then I have not received anything.

I apologize for the request and hope in your suggestion

thanks

Ciao a tutti e complimenti per lo sviluppo che state facendo per crittografare il file di whatsapp.

Credo comunque che molti di voi non vogliono vedere i messaggi del proprio profilo whatsapp (visto che li avete sul telefono) ma riuscire a leggere i messaggi di qualche amico.

Sono molto sincero e per questo vi dico che vorrei anche io leggere i messaggi di una persona solo che sono molto più indietro e non riesco a trovare il modo per poterlo avere.

Ho molti dati in mio possesso anche se non posso fisicamente avere il telefono della persona.

i dati in mio possesso sono:

user e password di gmail (dove posso vedere sms calllog imei google drive e installare app dal pc sul cellulare ma non configurarle)

user e password di facebook

numero di tel, dati personali, codice imei del telefono, indirizzi ip del telefono e del suo computer personale.

Possibile che con tutti questi dati non sono in grado di avere il file msgstore?

Potete aiutarmi e dirmi come posso fare?

Ho provato una volta con l'app whatsbackfree che mi salvava il file su google drive ma anche se l'app risulta istallata non posso configurarla e quindi non ho ricevuto mai niente.

Chiedo scusa per la richiesta e spero in un vostro suggerimento

Grazie
[Android Apps and Games] wovalle:
I don't know if anyone has posted it yet, but...

Today (04/20/14) I've been able to decryt a crypt5 database and generate the .html file.

I just downloaded Whatsapp DB Converter and this app converted the .crypt5 file into a .crypt one. Then I just followed the instruction described in the first post.

Download Whatsapp DB Converter: *insert playstore link here* + /store/apps/details?id=org.fireblade.whatsappconverter

I can't post the whole link because I'm a new user, bla bla.
[Android Apps and Games] boksbal123:
Hi guys,

I'm getting the error "Could not open database file. Guess it's not a valid Android or Iphone database file".

Any solutions?
[Android Apps and Games] naomixx:
restore CYPT5 whatsapp and transfer back on phone...

Did anyone no how to do this in really need help transferring my CYPT5 back onto my SG4S it just won't read the file it will show on my internal phone memory fine with data but won't read it to restore.
[Android Apps and Games] jigneshpatel571985:
i want to decrypt whatsapp database file crypt6.db

please tell me how to decrypt this database file..
[Android Apps and Games] jyani_raj:
how to decrypt .crypt4

Hello all,

any one know how to decrypt .crypt4 file ?

i have tried java and python code with modificartion but didn't get success. with open comment working with .crypt5 but not crypt4.

anyone know which changes require for .crypt4 file in java or python .

public class WhatsAppDecrypt5 {

public static void main(String[] args) {

String strArg0 = "C:\\msgstore.db.crypt4";

try {

decrypt(strArg2, new File(strArg0));

} catch (Exception e) {

System.out.println("Error : " + e.getMessage());

}

}

public static boolean decrypt(String acc, File f) throws Exception {

String s = "8D4B155CC9FF81E5CBF6FA7819366A3EC621A656416CD793";

byte[] key = hexStringToByteArray(s);

byte[] iv = { (byte) 0x1E, (byte) 0x39, (byte) 0xF3, (byte) 0x69,

(byte) 0xE9, (byte) 0xD, (byte) 0xB3, (byte) 0x3A, (byte) 0xA7,

(byte) 0x3B, (byte) 0x44, (byte) 0x2B, (byte) 0xBB,

(byte) 0xB6, (byte) 0xB0, (byte) 0xB9 };

System.out.println("IV Length:" + iv.length); // returns 16.

//	MessageDigest md = MessageDigest.getInstance("MD5");

//	md.update(acc.getBytes());

//byte[] md5 = md.digest();

//for (int i = 0; i < 24; i++) {

//	key ^= md5[i & 0xf];

//}

Cipher cipher = Cipher.getInstance("AES/CBC/NOPADDING");

SecretKeySpec keySpec = new SecretKeySpec(key, "AES");

cipher.init(Cipher.DECRYPT_MODE, keySpec, new IvParameterSpec(iv));

// cipher.update(getBytesFromFile(f));

byte[] output = cipher.doFinal(getBytesFromFile(f)); // should give the

// output

System.out.println("Data : " + new String(output));

return true;

}

public static final byte[] hexStringToByteArray(String str) {

int i = 0;

byte[] results = new byte[str.length() / 2];

for (int k = 0; k < str.length();) {

results = (byte) (Character.digit(str.charAt(k++), 16) << 4);

results += (byte) (Character.digit(str.charAt(k++), 16));

i++;

}

return results;

}

public static byte[] getBytesFromFile(File file) throws IOException {

InputStream is = new FileInputStream(file);

long length = file.length();

if (length > Integer.MAX_VALUE) {

} // file would be too large..

byte[] bytes = new byte[(int) length];

int offset = 0;

int numRead = 0;

while (offset < bytes.length

&& (numRead = is.read(bytes, offset, bytes.length - offset)) >= 0) {

offset += numRead;

}

if (offset < bytes.length) {

throw new IOException("Could not completely read file "

+ file.getName());

}

is.close();

System.out.println("Size : " + bytes.length);

return bytes;

}

}

Thnks
[Android Apps and Games] TripCode:
You can decrypt a crypt6 file using my app here: http://xdaforums.com/showthread.php?t=2689911 or online here: http://whatcrypt.com/

You will however need root acces to obtain your key file from /data/data/com.whatsapp/files/key in order to use these tools.
[Android Apps and Games] jigneshpatel571985:
how to get crypt6 key from android phone.

i cant find crypt6 key. so please tell me brifly

so i can get the key.

what is the full path of crypt6 key will be stored in phone.

thanks
[Android Apps and Games] resitm:
i asked the below in another thread but other people might benefit from the answer so i am asking it here again.

if i get a reply on the other thread i will update here.

thanks for the application. i was able to obtain a decrypted file of the database, file extension was .db

i want to use this file with smsbackup+ to backup whatsapp chats in my gmail.

smsbackup+ does not recognive the newly created file. do you know how i can solve this?

smsbackup+ was backing up after i converted the crypt5 file with this app https://play.google.com/store/apps/d...tsappconverter
[Android Apps and Games] TripCode:
Please don't crosspost. Reply here: http://xdaforums.com/showpost.php?p=52108597&postcount=15
[Android Apps and Games] TripCode:
Crypt4 was experimental and short lived. The cipher key was based on a number of unique strings such as the mother board id and subscriber id. It was deemed unfit for purpose and unreliable. The only way for you to decrypt your crypt4 file would be to restore it on the same device that created it. You may have to install an older version of WhatsApp as I think legacy support for crypt4 was dropped in the most recent beta builds.

Good luck!
[Android Apps and Games] dwytom:
Imposible to get the full sized picture with only he database right?
[Android Apps and Games] jigneshpatel571985:
there are any other way to extract crypt6 file from whatsapp.

without root. crypt6 key
[Android Apps and Games] huster12345:
The APK "Whatcrypt.apk" runs fine on my Android and found the "crypt6.key". But when I search manually for the "crypt6.key", I did not find it.

The mobile is rooted. What can I do?

At the end, I found it.
[Android Apps and Games] Amon-Don:
Any news about whatssapp for ios?
[Android Apps and Games] droopyar:
Nowadays, Whatsapp has changed their sdcard method, which is IMPOSSIBLE to decode the database except using a key file which is located on the restricted area where ROOT is necessary. So, without rooting your device it is NOT possible to decrypt it. Moreover, the previous application whatcrypt or similar are totally useless code as you need a rooted device to work. If you have a rooted device you directly take the original database, instead of using the sdcard backup. Dont waste more time, whatsapp sdcard backup is now secure :)
[Android Apps and Games] TripCode:
This isn't entirely accurate (root being necessary). It's true that WhatsApp saves the key file to root, but there is still a weakness. If you backup your WhatsApp messages and then uninstall WhatsApp and then re-install a patched version of WhatsApp that copies the cipher key to the sd you will see that the cipher remains unchanged. Then you would simply re-install the original WhatsApp and voilla you have your cipher. As you can do a full backup and restore this means that you can have your cipher key and original WhatsApp re-installed within minutes. Unfortunately, I have a sneaky feeling that when WhatsApp publishes their next stable build on GooglePlay that the cipher will roll (probably once a week). This is behavior I have observed with some beta versions (not all). In due course I will be releasing a patch app called WhatPatch that will enable you to patch your own official apks. If the cipher doesn't roll then you can use it to extract your cipher key. If it does roll you would have to leave your patched version installed to keep the decoding ability on a permanent basis. It is also possible to obtain the cipher key using usb based backup methods such as Helium.

Another potential weakness is the way WhatsApp generates the cipher key in the first place. Crypt6 databases contain a challenge key, sha-256 generation key (hashed against your gmail that is used to re-hash a secondary "compare" key) and the iv. This info is all stashed away within the first 67 bytes before the encrypted part. Decryption keys are clearly not generated randomly. WhatsApp can decrypt a database based only on the information contained within the database itself. This means that they are using some sort of keygen based on seeding and hashing to produce the correct cipher. I have generated thousands of keys and gotten various WhatsApp accounts to return the same cipher by manipulating what's in the crypt6 header. In my opinion it will only be a matter of time before the keygen routines are broken. Crypt6 is nothing more than a public relations excersise undertaken by Facebook to address the scaremongering articles posted by bloggers and in the media. If you believe that it's now "IMPOSSIBLE" then they're clearly doing their jobs. Kudos to Facebook.
[Android Apps and Games] droopyar:
In that case, you will need an ORIGINAL user registered on whatsapp to extract their key file. So you must install whatsapp in the user phone with validation of SIM. Then you could uinstall and use a patched version. But you need to have access to the device.

Rolling key seems a good solution to prevent these bugs.
[Android Apps and Games] TripCode:
True, but you also need access to the sd card so I'm pretty sure that's located fairly close to the device. ;)

WhatsApp doesn't validate on sim either. It validates by number. The re-verification is done locally if you've already validated (even with a re-install). Compare the rc file in the app root to the .nomedia file stashed on the SD in profile pictures. Actual re-verification (client to server) doesn't actually occur in most cases if the .nomedia file is present.
[Android Apps and Games] droopyar:
Yes, for people interested in taking the password directly. Go to:

https://github.com/tgalal/yowsup/issues/234

There are many options. But maybe in the future we will need to inject smaili code on the apk to do this...
[Android Apps and Games] TripCode:
This works for obtaining the password (great for api based clients etc...), but none of this is related to crypt6. Everything WhatsApp needs to decrypt a .crypt6 file is contained within the .crypt6 file itself. It stands to reason. Let's say that the FBI approach WhatsApp with a .crypt6 file you can bet your ass that they will be able to decrypt it based on those first 67 bytes and without knowing which account it relates to. The SHA-256 generation hash is used internally to verify that the database belongs to your device by hashing it against your gmail. The IV is essential for decryption (which is why it's stored in the database because WhatsApp need it). This only leaves the challenge key. The SHA-256 generation hash and IV maybe used to seed the hash against the challenge to produce the cipher (secret), but no other information is required. I've confirmed this by modifying WhatsApp to accept the result of the SHA-256 challenge amongst other checks and gotten WhatsApp to return identical ciphers even though that the client accounts were different. This also rules out the jabber id or phone number being used as a seed.

TLDR; WhatsApp can decrypt your personal data based on the first 67 bytes of a crypt6 database. Nothing else required other than their keygen.
[Android Apps and Games] jigneshpatel571985:
There are any other way to extract crypt6 file from whatsapp.

without root device and Crypt6 key .
[Android Apps and Games] TripCode:
Possibly with a usb backup solution such as Helium or a modified WhatsApp apk. These are the only two methods I have tried and tested. Be warned though that even if you're successful you may find that the cipher key will change. I have one device where the key hasn't changed and another where it has changed 3 times in 1 week, but hey that's beta software for you. :eek:
[Android Apps and Games] riekafe:
I just got this error..... What should I do?
[Android Apps and Games] TripCode:
Open a cmd window and type: pip install crypto
[Android Apps and Games] ltGuillaume:
Getting crypt7 files now (on v2.11.230), development is quite rapid (not that that necessarily means that WhatsApp db's are getting more secure, but still...). I'm still looking for a way to backup my messages using the old (working) SMS Backup+ 1.55, the beta has never worked for me. Simply put, that would mean I should decrypt the crypt5 or crypt7 and then encrypt back to crypt4 format. I tried all the apps and tools in this thread, so far I've only managed to decrypt a crypt5 db to plain sqlite. Any way to get that to crypt4 format?
[Android Apps and Games] droopyar:
Seems now it change again to crypt7. Lets check how to reverse this
[Android Apps and Games] cucy:
WhatCrypt Code Pages

Hi,

I used the Website whatsapp.livetrack.mobi to decrypt my db.crypt5 (Export WhatApps Database). Thanks for the site, I can see my messages now :)

Only the special german signs (ö,ä,ü) are not displayed correctly, although I selected German as primary language.

Is there a mistake in the code page? Can I fix it somehow?

Thanks for the help.
[Android Apps and Games] TripCode:
This version works with .crypt files so why bother with .crypt4? May I suggest something like: https://play.google.com/store/apps/details?id=com.tricrypt

No. Crypt4 was short lived and unstable. It was based on internal parameters from the device which did not remain static and hence why it was short lived.

Crypt7 and crypt 6 are identical (internally at least). The name change is readiness for the next public release on the Play Store so expect this to happen soon.

I will take a look at german character encoding next time I get a spare minute. The tool has also now moved to whatcrypt.com
[Android Apps and Games] ltGuillaume:
Thanks for the help and the tip to the Tri-Crypt app. I had high hopes with this one after reading the description, but after trying it on a crypt7 and crypt5 file (made sure there was only one file in the /sdcard/WhatsApp/Databases folder), on both occasions I got an error on decrypting. I'll check logcat soon for more info (will post here), but it's really odd... Is my db too big (19mb) for my phone during encryption (480mb ram) or is it corrupt perhaps?
[Android Apps and Games] TripCode:
Crypt7 will not work until the app is updated. I believe it has already been published, but may take 24 hours to update in the Play Store. Crypt5 will only fail if the Gmail you have set on your device was different when you originally installed WhatsApp. 19MB is not a large database. 389MB is the largest crypt file I've benchmarked and that decrypted ok. Tri-Crypt will pick the latest backup file in WhatsApp/Databases so make sure that you don't have anything that would conflict with your file (though it sounds like you did this). You may also want to do a manual backup in WhatsApp a couple of times to ensure the key file (crypt 6 / crypt 7) is written properly. Sometimes it doesn't save the key properly after a new installation. A WhatsApp bug. Finally, on rare occasions a corrupt sd could cause problems so that is another avenue (unlikely, but posssible). A corrupt backup file is also possible. No recovery options there. :(

EDIT: Latest version of Tri-Crypt is attached (if you can't wait for the update).
[Android Apps and Games] ltGuillaume:
I used the latest Play Store WhatsApp to extract (makes crypt5), I still have the same Google account set up as when I started using WhatsApp (somewhere in 2011). I checked logcat several times, but there's not a single line that has to do with Tri-Crypt. I updated Tri-Crypt with your attached version and tried again. Then I installed the latest WhatsApp from their website, enabled crypt6/7 in Tri-Crypt (have it su permissions) and tried again: toast says decryption failed and notification says recryption failed. Edit: I removed the app data for Tri-Crypt (did that after update, too) AND gave superuser permissions without confirmation this time... And all of a sudden it worked! This is great, so far the only app/tool working for me, thank you so much!
[Android Apps and Games] droopyar:
whatcrypt site seems do not handle correctly spanish characters.

I use the export html and all spanish characters are not well encoded.

Maybe a utf-8 problem on the site.

What about whatpatch? still not ready?
[Android Apps and Games] danwiz06:
whatsapp xtract

C:\whatsapp>python whatsapp_xtract.py msgstore.db -w wa.db

Python Version 2.x

Android mode!

trying to repair android database...

trying to decrypt android database...

decrypted database written to msgstore.db.plain.db

trying to repair decrypted android database...

Could not open database file. Guess it's not a valid Android or Iphone database

file.

C:\whatsapp>pause

Press any key to continue . . .

thats where am stuck
[Android Apps and Games] muldo87:
android lost

hey guys

i have managed to get these files from anroid lost and saved them to my laptop.... msgstore.db.crypt, msgstore-2014-04-28.1.db.crypt5

just wondering how i would be able to read them :good:
[Android Apps and Games] TripCode:
This was probably because WhatsApp was recently installed. The first time you install / upgrade a WhatsApp that uses crypt6 / crypt7 the first cipher key written to the keyfile is incorrect. The cipher key is generated by WhatsApp's server so it can take a while to update the correct cipher to the key file. Anybody else getting a similar issue I would advise them to do a manual backup a couple of times after installation before using any apps with support for crypt6 / crypt7 as this process usually writes the key file properly.

Yep! :( There is a UTF-8 issues. The same for German users. I thought I had fixed it but it seems that what I set is being overridden. I will look at it as I priority within the next 24 hours and see if I can get it fixed. Sorry for the incovenience. I have been too busy to complete WhatPatch presenly, but it's on my urgent todo list. I will pm you a beta as soon as I have ironed out a couple of issues.

You would need to decrypt them first. The script at the beggining of this thread will take care of the .crypt file and turn your messages into html. If you turn the databases into a db file then any SQLite Browser will do. You could also use something like:

Whatsapp Viewer For PC: http://xdaforums.com/showthread.php?t=2719741

WhatCrypt Android App: http://xdaforums.com/showthread.php?t=2689911

WhatCrypt Online Exporter: http://whatcrypt.com/?cmd=_export

The final one will turn db, crypt, crypt5, crypt6, crypt7 into something like this: http://whatcrypt.com/wa_chat-export-example.html The html generated is packed into a zip file which you download and view on your PC.
[Android Apps and Games] nexiatest:
Trouble in parsing with the new version

Hi, I'm having some issues in parsing the new version 2.2 for android whatsapp.

For the version 2.2, it keep prompt error for "could not open database file. Guess it's not a valid Anroid or Iphone database". Kindly advise on this. Trying to decrypt db.crypt5
[Android Apps and Games] TripCode:
See my post above yours as the solutions I posted apply to you too. Whatsapp Xtract doesn't support crypt5 so your options would be to re-crypt to .crypt using one of the tools and then run that through it or use a different viewer / exporter.
[Android Apps and Games] absmhmd:
Hello everyone, I'm new to the forum and completely stressed out!

I recently got a Samsung Galaxy S5 and previously had an S3. I wanted to transfer all of my conversations to the S5 but it just doesn't work. Every method seems to fail. Also, I'm a bit of a beginner with these programs, please could someone give me some advice and help me to get my conversations onto my new phone?
[Android Apps and Games] honeyxp:
i've the same problem. before i used bluestacks now i've changed my android phone and i backed up all my conversations. and copied them to my new phone. when installing whatsapp, it asked me if i wanted to restore my chat history and i pressed restore. but when it went through it (restoring messages window appeared) and after a while without showing me how many messages were restored it guided me through the remained parts of app installation (profile setting &...) and when done, none of my messages are restored :( so how to bring them back? plz help me :(
[Android Apps and Games] absmhmd:
Yes please can someone help me? I realised that I didn't provide enough details for someone to help, so I'll tell you what happened.

I copied the Whatsapp folder from the S3 to the S5 and when I open WA, it asks if I want to restore the chats. I say yes, but then it just comes up with empty group conversations and all the single chats are gone. I have read that this happens to a lot of people, but I haven't seen a solution yet. It's really important, so I really really beg someone to help me out, and also explain things simply for me :(
[Android Apps and Games] honeyxp:
and the most terrible limitation is here: you have only 7 days to restore your chat history, after it all of them are not restored anymore. so i offer u something:

for now till your problem solves, keep your chat history updated in your previous phone (by re-verifying your account periodically and backup your conversations so that your chat history won't be deleted. the same way i'm doing with my chat history in bluestacks... some chats are not backed up but it costs so all my previous chats are not removed...