Blog


Bad Guys - Android: how steal WhatsApp messages (Part 1)

This is the first part of "Bad Guys - Android: how steal WhatsApp messages"!
I couldn't test this method in rooted Android, so in this part We steal only the crypted db.

To be able to read WhatsApp messages We need to steal the crypted database and also the key to decrypt it!
Here there is the main problem, infact we can read the key only if our smartphone is rooted.

Requirements:
- Need to know how to program Android and Java
- Android Studio
- Malicious web Server

Let's see the finished code:
AndroidManifest.xml
image

MainActivity.java
image

image

MultipartUtility.java
image

image

image

image

image

Let's make apk file and download it to your android device; this app shows "Hello World!", but meanwhile sends
your WhatsApp crypted db to my malicious web server!

db.php
image

Do you really want to root your smartphone?

Study hard :)