[GH-ISSUE #113] can you update the new crypt 14 offset #100

Closed
opened 2026-02-25 20:34:39 +03:00 by kerem · 10 comments
Owner

Originally created by @JoKeR7-Mo2a on GitHub (Jun 16, 2021).
Original GitHub issue: https://github.com/B16f00t/whapa/issues/113

can you update the new crypt 14 offset
whatsapp new crypt 14 db has been changed again ?

Originally created by @JoKeR7-Mo2a on GitHub (Jun 16, 2021). Original GitHub issue: https://github.com/B16f00t/whapa/issues/113 can you update the new crypt 14 offset whatsapp new crypt 14 db has been changed again ?
kerem closed this issue 2026-02-25 20:34:39 +03:00
Author
Owner

@augustoraphael commented on GitHub (Jun 16, 2021):

As mentioned in the previous isssue (link below), I think it has changed again. I got success descrypting my database just after change my whacipher.py file in lines 79 and 80 to the following:

data = db_data[191:]
iv = db_data[67:83]

https://github.com/B16f00t/whapa/issues/96#issuecomment-850997115

The above suggestion must be considered in the solution.

<!-- gh-comment-id:862675847 --> @augustoraphael commented on GitHub (Jun 16, 2021): As mentioned in the previous isssue (link below), I think it has changed again. I got success descrypting my database just after change my whacipher.py file in lines 79 and 80 to the following: data = db_data[191:] iv = db_data[67:83] https://github.com/B16f00t/whapa/issues/96#issuecomment-850997115 The above suggestion must be considered in the solution.
Author
Owner

@JoKeR7-Mo2a commented on GitHub (Jun 16, 2021):

how did you know the change
i mean how can i get new offset if WhatsApp change it agien

<!-- gh-comment-id:862785727 --> @JoKeR7-Mo2a commented on GitHub (Jun 16, 2021): how did you know the change i mean how can i get new offset if WhatsApp change it agien
Author
Owner

@JoKeR7-Mo2a commented on GitHub (Jun 16, 2021):

th you it work but how can i know the change if any update happen

<!-- gh-comment-id:862788431 --> @JoKeR7-Mo2a commented on GitHub (Jun 16, 2021): th you it work but how can i know the change if any update happen
Author
Owner

@augustoraphael commented on GitHub (Jun 18, 2021):

Actualy, I don't know about that as well. I only followed the instructions of @ElDavoo in the previous post. Maybe he can help us about your question.

<!-- gh-comment-id:864238474 --> @augustoraphael commented on GitHub (Jun 18, 2021): Actualy, I don't know about that as well. I only followed the instructions of @ElDavoo in the previous post. Maybe he can help us about your question.
Author
Owner

@ElDavoo commented on GitHub (Jun 18, 2021):

I made a small bruteforcer, changing a python decryptor, that tried out all possible values. Gave it some hours and called it a day.
There are probably better ways

<!-- gh-comment-id:864246828 --> @ElDavoo commented on GitHub (Jun 18, 2021): I made a small bruteforcer, changing a python decryptor, that tried out all possible values. Gave it some hours and called it a day. There are probably better ways
Author
Owner

@B16f00t commented on GitHub (Jun 20, 2021):

I'm still not sure what the correct values are and if they change based on something, if anyone has the latest good values I'll modify them in the script.

<!-- gh-comment-id:864556535 --> @B16f00t commented on GitHub (Jun 20, 2021): I'm still not sure what the correct values are and if they change based on something, if anyone has the latest good values I'll modify them in the script.
Author
Owner

@selvania commented on GitHub (Jun 22, 2021):

I can confirm that the values seem to be no longer valid. Also, we were forced to run the app on windows, it seems mac's don't accept the crypt14 filetype. I looked through the code but couldn't find the cause....

<!-- gh-comment-id:866270071 --> @selvania commented on GitHub (Jun 22, 2021): I can confirm that the values seem to be no longer valid. Also, we were forced to run the app on windows, it seems mac's don't accept the crypt14 filetype. I looked through the code but couldn't find the cause....
Author
Owner

@leosol commented on GitHub (Jun 25, 2021):

Just worked for me with version 2.21.12.21 (tested with w4b and regular whatsapp).
I think that it would be very nice to have this in trunk:

data = db_data[191:]
iv = db_data[67:83]
<!-- gh-comment-id:868864784 --> @leosol commented on GitHub (Jun 25, 2021): Just worked for me with version 2.21.12.21 (tested with w4b and regular whatsapp). I think that it would be very nice to have this in trunk: ``` data = db_data[191:] iv = db_data[67:83] ```
Author
Owner

@B16f00t commented on GitHub (Jun 29, 2021):

Someone try the new values? @ElDavoo could you share your script with the community to get the correct Data and IV?

<!-- gh-comment-id:870444902 --> @B16f00t commented on GitHub (Jun 29, 2021): Someone try the new values? @ElDavoo could you share your script with the community to get the correct Data and IV?
Author
Owner

@ElDavoo commented on GitHub (Jun 29, 2021):

I deleted it. Lmao

The new values I wrote should work.

<!-- gh-comment-id:870840625 --> @ElDavoo commented on GitHub (Jun 29, 2021): I deleted it. Lmao The new values I wrote should work.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/whapa#100
No description provided.