EvilZone

Hacking and Security => Tutorials => : Axon May 24, 2014, 04:34:14 PM

: Whatsapp stealer
: Axon May 24, 2014, 04:34:14 PM
This is a 12 page walkthrough on how to make a fake apk to grap whatsapp database, decrypt the crypt5 file and read the messages.
http://upload.evilzone.org/download.php?id=5313095&type=zip
: Re: Whatsapp stealer
: Traitor4000 May 25, 2014, 05:07:59 AM
Too bad i have ishit not android...
: Re: Whatsapp stealer
: Kulverstukas May 25, 2014, 09:38:59 AM
It's a very simple method it seems. The "tutorial" was very simple, with lots of grammar mistakes though.
Thanks for the find, +cookie.

@Traitor4000: you can always change this awkward situation.
: Re: Whatsapp stealer
: Axon May 25, 2014, 05:59:30 PM
It's a very simple method it seems. The "tutorial" was very simple, with lots of grammar mistakes though.
Thanks for the find, +cookie.

Indeed it's a simple trick, but the next step is how convince the victim to download and install the apk?
: Re: Whatsapp stealer
: M1lak0 May 25, 2014, 09:56:02 PM
Indeed it's a simple trick, but the next step is how convince the victim to download and install the apk?
Hahah yes, thats where SE plays its role! :D
And thanks for the share! :)
: Re: Whatsapp stealer
: d4rkcat May 25, 2014, 10:10:29 PM
There is a metasploit module exploit/android/browser/webview_addjavascriptinterface
This allows you to get an unprivileged java meterpreter on certain browsers used with android by simply getting the user to visit a malicious link.
You could then use a root exploit to escalate privileges and install your apk.
: Re: Whatsapp stealer
: rex17 July 30, 2014, 11:57:34 AM
great post. But whatsapp has moved to crypt7 can i still use the same method
: Re: Whatsapp stealer
: Axon August 28, 2014, 05:35:40 PM
cool tutorial but I am unable to download the script from the below link

http://whatsapp123q.byethost16.com/wp.php
You got to be fucking kidding me?
: Re: Whatsapp stealer
: Schalla August 29, 2014, 07:02:51 AM
Wow.
: Re: Whatsapp stealer
: techb August 29, 2014, 07:41:47 AM
Wow.
You got to be fucking kidding me?

^This. Lol, at least he knows how to grab screenshots, pic related:

(http://i0.kym-cdn.com/entries/icons/original/000/005/600/its-something.jpg)
: Re: Whatsapp stealer
: khofo August 31, 2014, 03:35:19 AM
Thanks dude I made a thread before to create a something like this
+1

: Re: Whatsapp stealer
: Devil_Zone September 17, 2014, 07:20:17 PM
hi Axon,


I tried it but when I want to export it to APK it says that it have some erros


 8)
: Re: Whatsapp stealer
: OfficialBossa December 07, 2014, 10:19:38 PM
This looks very interesting! Thanks for the post.
Is there any way of doing anything similar with iPhones?
: Re: Whatsapp stealer
: Axon December 07, 2014, 10:22:39 PM
This looks very interesting! Thanks for the post.
Is there any way of doing anything similar with iPhones?
I haven't come across anything related to apple phones, but if you manage to dig up something useful from the web. Don't hesitate to share.
: Re: Whatsapp stealer
: Jee_genius April 07, 2015, 10:21:02 PM
Just to add an idea,shall we place the crypt5 from the victims phone and place in our phone,and re install whats app and recover messages??
: Re: Whatsapp stealer
: Sherlock Holmes April 07, 2015, 10:42:59 PM
There is a unique key for decrypting the crypt8 (not crypt5. ) databases located in the /data/data/whatsapp. So no you obviously can't do that moronic thing.

This thread is old now, digger. Stop necro
: Re: Whatsapp stealer
: ary May 12, 2015, 04:33:59 AM
does it still work, cause i really have to use this?
: Re: Whatsapp stealer
: Lijpe May 17, 2015, 07:02:04 PM
great post. But whatsapp has moved to crypt7 can i still use the same method


Yes it definitely still is, just google a decrypter.