| Name | wa-crypt-tools JSON |
| Version |
0.1.0
JSON |
| download |
| home_page | None |
| Summary | Manages WhatsApp .crypt12, .crypt14 and .crypt15 files, given the key. |
| upload_time | 2024-08-23 22:34:21 |
| maintainer | None |
| docs_url | None |
| author | None |
| requires_python | >=3.8 |
| license | None |
| keywords |
whatsapp
crypt12
crypt14
crypt15
|
| VCS |
|
| bugtrack_url |
|
| requirements |
No requirements were recorded.
|
| Travis-CI |
No Travis.
|
| coveralls test coverage |
No coveralls.
|
[](https://coveralls.io/github/ElDavoo/wa-crypt-tools?branch=main)
# WhatsApp Crypt Tools
Decrypt and encrypt WhatsApp and WA Business' .crypt12, .crypt14 and .crypt15 files with ease!
For decryption, you NEED **the key file** or the 64-characters long key.
The key file is named "key" if the backup is crypt14 or
"encrypted_backup.key" if the backup is crypt15 (encrypted E2E backups).
Those who are looking for a more complete suite for
WhatsApp forensics, check out [whapa.](https://github.com/B16f00t/whapa)
# Quick install
## Cloud - Google Colab
If you do not want to install programs in your computer, you can run this program
[in Google Colab](https://colab.research.google.com/drive/17z5UWE9dBbyvVfOG-KzRWCmTqFA3j82u?usp=sharing)
.
## Local - Jupyter
If you are familiar with Jupyter (read
[here](https://www.earthdatascience.org/courses/intro-to-earth-data-science/open-reproducible-science/jupyter-python/get-started-with-jupyter-notebook-for-python)
if you're not), you can use the
[notebook version](notebook.ipynb)
of the program.
## Local - pip
You can install this script as a package through pip. Just run:
```bash
python -m pip install git+https://github.com/ElDavoo/wa-crypt-tools
```
# Quick start
## Decrypt a file with wadecrypt
```
usage: wadecrypt [-h] [-nm] [-bs BUFFER_SIZE] [-nd] [-v] [-f] [keyfile] [encrypted] [decrypted]
```
So, for decrypting a crypt12/14/15, we give the program the key file, the encrypted file and the name of the output file.
### Example
```
$ wadecrypt encrypted_backup.key msgstore.db.crypt15 msgstore.db
key15.py:51 : [I] Crypt15 / Raw key loaded
wadecrypt.py:271 : [I] Done
```
## Encrypt a file with waencrypt (BETA)
```
usage: waencrypt [-h] [-f] [-v] [--enable-features [ENABLE_FEATURES ...]] [--max-feature MAX_FEATURE]
[--multi-file] [--type {12,14,15}] [--iv IV] [--reference REFERENCE] [--noparse]
[--wa-version WA_VERSION] [--jid JID] [--backup-version BACKUP_VERSION] [--no-compress]
[keyfile] [decrypted] [encrypted]
```
Encryption is more complex and untested: it is advised to use another encrypted file
from the same account, which we will call "reference".
### With a reference file (only database crypt15 tested)
```
waencrypt --reference msgstore.db.crypt15 encrypted_backup.key msgstore.db msgstore-new.db.crypt15
waencrypt.py:57 : [W] This script is in beta stage
waencrypt.py:89 : [I] Done!
```
### Without a reference file
You need to supply the following parameters:
1) The feature list: Only for 2019+ databases. A list of numbered boolean
properties related to your database. There is currently no way to infer them
from a database file. In the example, we will just use my backup's feature list,
but don't expect it to work for you.
2) The max feature number, which is 39 at the time of writing
3) The version of the app that encrypted the file: Use a reasonable value,
like 2.24.8.6 or something.
4) Jid: The last 2 numbers of your phone number
5) Backup version: Use 1.
Defaults will be used if parameters are omitted.
To sum it up:
```
$ waencrypt --enable-features 5 6 7 8 9 10 11 12 13 14 15 16
17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 39 --type 15 --wa-version 2.26.1.2 --jid 00 --backup
-version 1 encrypted_backup.key msgstore.db msgstore-new.db.crypt15
waencrypt.py:57 : [W] This script is in beta stage
waencrypt.py:89 : [I] Done!
```
You can get info about a backup file with the `wainfo` tool.
# Tool list
For usage, run the tool with `-h` option.
1) `wacreatekey` - Create key files
2) `wadecrypt` - Decrypt backups
3) `waencrypt` - Encrypt backups
4) `waguess` - Hacky way to try decrypt backups
5) `wainfo` - Get info about a backup
# FAQ
## Can I decrypt a backup without a key file?
NO! What would be the point of encrypting a file otherwise?
## I forgot the password / 64-letters key, can you help me?
See above.
## The program doesn't decrypt my backups and says the backups are corrupted
Your backups are corrupted. You can try disabling all checks with the
`-f` flag, but expect crashes and/or unreadable output.
## The program doesn't decrypt and says the key is wrong
The key is wrong. You can try disabling all checks with the
`-f` flag, but expect crashes and/or unreadable output.
## What is the best setup for decrypting my own databases?
1) Enable end-to-end backups and do NOT use a password, use the 64-letters key option.
2) Use `wacreatekey` to create a `encrypted_backup.key` file
3) Store your key file safely and use `wadecrypt` to decrypt your backups.
In this way, you will manage your own root key - otherwise WhatsApp might change
your key when appropriate.
## Can I use the password to decrypt the database?
No! The password is only used to talk with the WhatsApp servers and retrieve
the 64-letters key.
In other words, the password is used to **protect the key**, it's not used
to encrypt the backups.
## Can I decrypt .mcrypt1 files downloaded from Google Drive?
Yes, but the code is not documented, so please at this time read the code.
## I really think the program is broken, that my backups are intact and that the key is right
Send me the needed files on Telegram and I will take a look.
If you (understandably) have privacy concerns, open an issue and attach:
1) Output of the program (both with and without --force)
2) Hexdump of keyfile
3) Hexdump of first 512 bytes of encrypted DB
But it will be more difficult to help you.
## Where do I get the key(file)?
On a rooted Android device, you can just copy
`/data/data/com.whatsapp/files/key`
(or `/data/data/com.whatsapp/files/encrypted_backup.key` if backups are crypt15).
If you enabled E2E backups, and you did not use a password
(you have a copy of the 64-digit key, for example a screenshot),
you can just transcribe and use it in lieu of the key file parameter.
**There are other ways, but it is not in the scope of this project
to tell you.
Issues asking for this will be closed as invalid.**
### I will happily accept pull requests for the currently open issues. :)
### Last tested version (don't expect this to be updated)
Stable:
2.24.16.76
Beta:
2.24.18.10
#### Business
Stable:
2.24.16.77
#### Protobuf automatic fix
You can install the proto optional dependencies to use `protoletariat` and fix the proto imports automatically.
First, after cloning the repository, do an editable installation of the package (possibily in a virtual environment) with:
`pip install -e .[proto]`
This will also install the optional dependencies of the package.
Next, download the protobuf compiler from its repository [here](https://github.com/protocolbuffers/protobuf/releases).
You can move the protoc program to the `wa-crypt-tools/proto` folder where the .proto files are.
Replace the protobuf classes as needed and run `protoc` to generate the python classes.
From the `wa-crypt-tools/proto` directory of the project, run:
`./protoc --python_out=../src/wa_crypt_tools/proto --proto_path=. *.proto`
After generating the protobuf python classes through `protoc`, from that same directory run:
`protol --in-place --python-out ..\src\wa_crypt_tools\proto protoc --proto-path=. *.proto`
Linux:
`PATH="$(pwd):$PATH" protol --in-place --python-out ../src/wa_crypt_tools/proto protoc --proto-path=. *.proto`
Now all the generated python classes should have their imports fixed.
---
## Donations
Thank you so much to each one of you!
- **🎉🎉🎉 [githubsterer](https://github.com/githubsterer) 🎉🎉🎉**
- **🎉🎉🎉 [courious875](https://github.com/courious875) 🎉🎉🎉**
- **🎉 [pscriptos](https://github.com/pscriptos) 🎉**
Anyone else that I forgot to mention!
---
#### Credits:
- Original implementation for crypt12: [TripCode](https://github.com/TripCode)
- Some help at the beginning: [DjEdu28](https://github.com/DjEdu28)
- Actual crypt14/15 implementation with protobuf: [ElDavoo](https://github.com/ElDavoo)
- Help with crypt14/15 footer: [george-lam](https://github.com/georg-lam)
- Pip package implementation: [Mikel12455](https://github.com/Mikel12455)
- [kingbtcvl](https://github.com/kingbtcvl)
Anyone else that helped!
### Stargazers over time
[](https://star-history.com/#ElDavoo/wa-crypt-tools&Date)
Raw data
{
"_id": null,
"home_page": null,
"name": "wa-crypt-tools",
"maintainer": null,
"docs_url": null,
"requires_python": ">=3.8",
"maintainer_email": null,
"keywords": "whatsapp, crypt12, crypt14, crypt15",
"author": null,
"author_email": "Davide Palma <pypi@davidepalma.it>",
"download_url": "https://files.pythonhosted.org/packages/df/2d/305de9042be8b11bf3a1a1935d0aac6ee203dfa6ae7ab1f9ede44059cdeb/wa_crypt_tools-0.1.0.tar.gz",
"platform": null,
"description": "[](https://coveralls.io/github/ElDavoo/wa-crypt-tools?branch=main)\n\n# WhatsApp Crypt Tools\nDecrypt and encrypt WhatsApp and WA Business' .crypt12, .crypt14 and .crypt15 files with ease! \nFor decryption, you NEED **the key file** or the 64-characters long key. \nThe key file is named \"key\" if the backup is crypt14 or \n\"encrypted_backup.key\" if the backup is crypt15 (encrypted E2E backups). \nThose who are looking for a more complete suite for\nWhatsApp forensics, check out [whapa.](https://github.com/B16f00t/whapa)\n\n# Quick install\n\n## Cloud - Google Colab\n\nIf you do not want to install programs in your computer, you can run this program\n[in Google Colab](https://colab.research.google.com/drive/17z5UWE9dBbyvVfOG-KzRWCmTqFA3j82u?usp=sharing)\n. \n\n## Local - Jupyter\n\nIf you are familiar with Jupyter (read \n[here](https://www.earthdatascience.org/courses/intro-to-earth-data-science/open-reproducible-science/jupyter-python/get-started-with-jupyter-notebook-for-python)\nif you're not), you can use the\n[notebook version](notebook.ipynb)\nof the program.\n\n## Local - pip\n\nYou can install this script as a package through pip. Just run:\n```bash\npython -m pip install git+https://github.com/ElDavoo/wa-crypt-tools\n```\n\n# Quick start\n\n## Decrypt a file with wadecrypt\n```\nusage: wadecrypt [-h] [-nm] [-bs BUFFER_SIZE] [-nd] [-v] [-f] [keyfile] [encrypted] [decrypted]\n```\n\nSo, for decrypting a crypt12/14/15, we give the program the key file, the encrypted file and the name of the output file.\n\n### Example\n\n```\n$ wadecrypt encrypted_backup.key msgstore.db.crypt15 msgstore.db\nkey15.py:51 : [I] Crypt15 / Raw key loaded\nwadecrypt.py:271 : [I] Done\n```\n\n## Encrypt a file with waencrypt (BETA)\n\n```\nusage: waencrypt [-h] [-f] [-v] [--enable-features [ENABLE_FEATURES ...]] [--max-feature MAX_FEATURE]\n [--multi-file] [--type {12,14,15}] [--iv IV] [--reference REFERENCE] [--noparse]\n [--wa-version WA_VERSION] [--jid JID] [--backup-version BACKUP_VERSION] [--no-compress]\n [keyfile] [decrypted] [encrypted]\n```\n\nEncryption is more complex and untested: it is advised to use another encrypted file \nfrom the same account, which we will call \"reference\". \n\n### With a reference file (only database crypt15 tested)\n```\nwaencrypt --reference msgstore.db.crypt15 encrypted_backup.key msgstore.db msgstore-new.db.crypt15\nwaencrypt.py:57 : [W] This script is in beta stage\nwaencrypt.py:89 : [I] Done!\n```\n\n### Without a reference file\n\nYou need to supply the following parameters: \n\n1) The feature list: Only for 2019+ databases. A list of numbered boolean\n properties related to your database. There is currently no way to infer them\n from a database file. In the example, we will just use my backup's feature list,\n but don't expect it to work for you. \n2) The max feature number, which is 39 at the time of writing\n3) The version of the app that encrypted the file: Use a reasonable value,\n like 2.24.8.6 or something. \n4) Jid: The last 2 numbers of your phone number \n5) Backup version: Use 1.\n\nDefaults will be used if parameters are omitted. \n\nTo sum it up:\n```\n$ waencrypt --enable-features 5 6 7 8 9 10 11 12 13 14 15 16\n 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 39 --type 15 --wa-version 2.26.1.2 --jid 00 --backup\n-version 1 encrypted_backup.key msgstore.db msgstore-new.db.crypt15 \nwaencrypt.py:57 : [W] This script is in beta stage\nwaencrypt.py:89 : [I] Done!\n```\n\nYou can get info about a backup file with the `wainfo` tool.\n\n# Tool list\nFor usage, run the tool with `-h` option.\n1) `wacreatekey` - Create key files\n2) `wadecrypt` - Decrypt backups\n3) `waencrypt` - Encrypt backups\n4) `waguess` - Hacky way to try decrypt backups\n5) `wainfo` - Get info about a backup \n\n# FAQ\n\n## Can I decrypt a backup without a key file?\n\nNO! What would be the point of encrypting a file otherwise? \n\n## I forgot the password / 64-letters key, can you help me?\n\nSee above.\n\n## The program doesn't decrypt my backups and says the backups are corrupted\n\nYour backups are corrupted. You can try disabling all checks with the\n`-f` flag, but expect crashes and/or unreadable output.\n\n## The program doesn't decrypt and says the key is wrong\n\nThe key is wrong. You can try disabling all checks with the\n`-f` flag, but expect crashes and/or unreadable output.\n\n## What is the best setup for decrypting my own databases?\n\n1) Enable end-to-end backups and do NOT use a password, use the 64-letters key option.\n2) Use `wacreatekey` to create a `encrypted_backup.key` file\n3) Store your key file safely and use `wadecrypt` to decrypt your backups.\n\nIn this way, you will manage your own root key - otherwise WhatsApp might change \nyour key when appropriate. \n\n## Can I use the password to decrypt the database?\n\nNo! The password is only used to talk with the WhatsApp servers and retrieve \nthe 64-letters key. \nIn other words, the password is used to **protect the key**, it's not used \nto encrypt the backups. \n\n## Can I decrypt .mcrypt1 files downloaded from Google Drive?\nYes, but the code is not documented, so please at this time read the code. \n\n\n## I really think the program is broken, that my backups are intact and that the key is right\n\nSend me the needed files on Telegram and I will take a look.\n\nIf you (understandably) have privacy concerns, open an issue and attach:\n1) Output of the program (both with and without --force)\n2) Hexdump of keyfile\n3) Hexdump of first 512 bytes of encrypted DB\n\nBut it will be more difficult to help you. \n\n## Where do I get the key(file)?\nOn a rooted Android device, you can just copy \n`/data/data/com.whatsapp/files/key` \n(or `/data/data/com.whatsapp/files/encrypted_backup.key` if backups are crypt15). \nIf you enabled E2E backups, and you did not use a password \n(you have a copy of the 64-digit key, for example a screenshot), \nyou can just transcribe and use it in lieu of the key file parameter. \n**There are other ways, but it is not in the scope of this project \nto tell you. \nIssues asking for this will be closed as invalid.** \n### I will happily accept pull requests for the currently open issues. :)\n\n### Last tested version (don't expect this to be updated)\nStable: \n2.24.16.76 \nBeta: \n2.24.18.10\n\n#### Business\nStable: \n2.24.16.77\n\n#### Protobuf automatic fix\n\nYou can install the proto optional dependencies to use `protoletariat` and fix the proto imports automatically.\n\nFirst, after cloning the repository, do an editable installation of the package (possibily in a virtual environment) with:\n\n`pip install -e .[proto]`\n\nThis will also install the optional dependencies of the package.\n\nNext, download the protobuf compiler from its repository [here](https://github.com/protocolbuffers/protobuf/releases). \nYou can move the protoc program to the `wa-crypt-tools/proto` folder where the .proto files are.\n \nReplace the protobuf classes as needed and run `protoc` to generate the python classes. \nFrom the `wa-crypt-tools/proto` directory of the project, run:\n\n`./protoc --python_out=../src/wa_crypt_tools/proto --proto_path=. *.proto`\n\nAfter generating the protobuf python classes through `protoc`, from that same directory run:\n\n`protol --in-place --python-out ..\\src\\wa_crypt_tools\\proto protoc --proto-path=. *.proto`\n\nLinux: \n\n`PATH=\"$(pwd):$PATH\" protol --in-place --python-out ../src/wa_crypt_tools/proto protoc --proto-path=. *.proto`\n\nNow all the generated python classes should have their imports fixed.\n\n---\n\n## Donations\n\nThank you so much to each one of you!\n- **\ud83c\udf89\ud83c\udf89\ud83c\udf89 [githubsterer](https://github.com/githubsterer) \ud83c\udf89\ud83c\udf89\ud83c\udf89** \n- **\ud83c\udf89\ud83c\udf89\ud83c\udf89 [courious875](https://github.com/courious875) \ud83c\udf89\ud83c\udf89\ud83c\udf89** \n- **\ud83c\udf89 [pscriptos](https://github.com/pscriptos) \ud83c\udf89** \n\nAnyone else that I forgot to mention! \n---\n\n#### Credits:\n - Original implementation for crypt12: [TripCode](https://github.com/TripCode) \n - Some help at the beginning: [DjEdu28](https://github.com/DjEdu28) \n - Actual crypt14/15 implementation with protobuf: [ElDavoo](https://github.com/ElDavoo) \n - Help with crypt14/15 footer: [george-lam](https://github.com/georg-lam) \n - Pip package implementation: [Mikel12455](https://github.com/Mikel12455) \n - [kingbtcvl](https://github.com/kingbtcvl) \n\n Anyone else that helped! \n\n\n### Stargazers over time\n\n[](https://star-history.com/#ElDavoo/wa-crypt-tools&Date)\n",
"bugtrack_url": null,
"license": null,
"summary": "Manages WhatsApp .crypt12, .crypt14 and .crypt15 files, given the key.",
"version": "0.1.0",
"project_urls": null,
"split_keywords": [
"whatsapp",
" crypt12",
" crypt14",
" crypt15"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "6a8e54ade7dd52371b538165b02cfb5d6af4eb6032328454909f0998f8bc5655",
"md5": "4247bac29f1f00f2e1bc1372fd82c0d5",
"sha256": "79dc754afe96be2a9091494b067d99da3a7d6308be6afb1827e7ecd703527910"
},
"downloads": -1,
"filename": "wa_crypt_tools-0.1.0-py3-none-any.whl",
"has_sig": false,
"md5_digest": "4247bac29f1f00f2e1bc1372fd82c0d5",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.8",
"size": 53088,
"upload_time": "2024-08-23T22:34:19",
"upload_time_iso_8601": "2024-08-23T22:34:19.583685Z",
"url": "https://files.pythonhosted.org/packages/6a/8e/54ade7dd52371b538165b02cfb5d6af4eb6032328454909f0998f8bc5655/wa_crypt_tools-0.1.0-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "df2d305de9042be8b11bf3a1a1935d0aac6ee203dfa6ae7ab1f9ede44059cdeb",
"md5": "2dd1baf55e512ae864909510281a7a6c",
"sha256": "13f93694ac650715039df6de10b1c18b7b0c2f74fe050277ccf1e1e211af889e"
},
"downloads": -1,
"filename": "wa_crypt_tools-0.1.0.tar.gz",
"has_sig": false,
"md5_digest": "2dd1baf55e512ae864909510281a7a6c",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.8",
"size": 1257554,
"upload_time": "2024-08-23T22:34:21",
"upload_time_iso_8601": "2024-08-23T22:34:21.716362Z",
"url": "https://files.pythonhosted.org/packages/df/2d/305de9042be8b11bf3a1a1935d0aac6ee203dfa6ae7ab1f9ede44059cdeb/wa_crypt_tools-0.1.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-08-23 22:34:21",
"github": false,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"lcname": "wa-crypt-tools"
}
