Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hacking WhatsApp

Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
4
1.3k

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012
Tweet

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
2
Guardrails and Sanity Checks: Verifying LLM Input and Output for Developers
Avatar for Enrique López Mañas kikoso
0
29
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
52
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
280
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
71
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
75
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
95
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
70
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21

Other Decks in Programming

See All in Programming
Foundation Modelsを実装日本語学習アプリを作ってみた！
Avatar for 蛋白（たんぱく・TANPACT） hypebeans
1
120
デミカツ切り抜きで面倒くさいことはPythonにやらせよう
Avatar for aokirishima aokswork3
0
260
bootcamp2025_バックエンド研修_WebAPIサーバ作成.pdf
Avatar for GENIEE ,Inc geniee_inc
0
120
タスクの特性や不確実性に応じた最適な作業スタイルの選択（ペアプロ・モブプロ・ソロプロ）と実践 / Optimal Work Style Selection: Pair, Mob, or Solo Programming.
Avatar for yuki honyanya
3
190
大規模アプリのDIフレームワーク刷新戦略 ～過去最大規模の並行開発を止めずにアプリ全体に導入するまで～
Avatar for GO Inc. dev mot_techtalk
1
470
overlayPreferenceValue で実現する ピュア SwiftUI な AdMob ネイティブ広告
Avatar for Takashi uhucream
0
200
kiroとCodexで最高のSpec駆動開発を！！数時間で web3ネイティブなミニゲームを作ってみたよ！
Avatar for Haruki Kondo mashharuki
0
840
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
550
TFLintカスタムプラグインで始める Terraformコード品質管理
Avatar for bells17 bells17
2
350
Domain-centric? Why Hexagonal, Onion, and Clean Architecture Are Answers to the Wrong Question
Avatar for Oliver Drotbohm olivergierke
3
940
Android16 Migration Stories ~Building a Pattern for Android OS upgrades~
Avatar for Swimmy reoandroider
0
130
Building, Deploying, and Monitoring Ruby Web Applications with Falcon (Kaigi on Rails 2025)
Avatar for Samuel Williams ioquatix
4
2.5k

Featured

See All Featured
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
10
610
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1032
470k
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
6.7k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
120k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
246
12k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
56
6.6k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
34
8.9k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
127
54k
Designing for Performance
Avatar for Lara Hogan lara
610
69k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
920
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.5k

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12