mirror of
https://github.com/B16f00t/whapa.git
synced 2026-04-26 11:25:56 +03:00
[GH-ISSUE #96] Error -3 while decompressing data: incorrect header check (after crypt14 update) #86
Labels
No labels
enhancement
help wanted
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/whapa#86
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @maiqueg on GitHub (May 4, 2021).
Original GitHub issue: https://github.com/B16f00t/whapa/issues/96
Around 1 May, Whatsapp began to use crypt14 instead of crypt12 on the msgstore.db backup.
Since then I'm getting this error when trying to decrypt:
I saw that the key is exactly the same used for crypt12, maybe only the decrypt method that changed? Any ideas?
@Roly855 commented on GitHub (May 6, 2021):
I have exactly the same problem, some help please. Thank you very much in advance
@ElDavoo commented on GitHub (May 9, 2021):
Offsets need to be updated. Take a look at:
andreas-mausch/whatsapp-viewer#114 (comment)
the following code results:
andreas-mausch/whatsapp-viewer@7035b9c
@Roly855 commented on GitHub (May 9, 2021):
Thanks a million ElDavoo!!!!
@maiqueg commented on GitHub (May 11, 2021):
I've opened a pull request with the new offsets, but only for decryption.
#97
@B16f00t commented on GitHub (May 11, 2021):
Thanks to @ElDavoo for look for the problem and @maiqueg for the fix.
@ElDavoo commented on GitHub (May 28, 2021):
Did your offset change again in this night's backup? I noticed IV now starts at byte 67, but don't know about the rest.
@ElDavoo commented on GitHub (May 30, 2021):
The new offsets are:
data = db_data[191:]
iv = db_data[67:83]
"Server salt" also changes from byte 14 to byte 15, but... you don't use server salt in your code ?? wtf? Can someone explain plz?
Not opening a pull request because I think this needs to be further improved: Format may change again in the future, users might be able to input their own offsets, there should be a list of offsets to try, and so on.
@ElDavoo commented on GitHub (Jun 22, 2021):
@B16f00t