Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hacking WhatsApp

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
1.3k
4

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
42
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
70
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
470
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
88
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
88
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
120
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
82
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
200

Other Decks in Programming

See All in Programming
GitHubCopilotCLIをはじめよう.pdf
Avatar for tkym htkym
0
330
書籍「ユーザーストーリーマッピング」が私のバイブル
Avatar for asumikam asumikam
4
480
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
230
ついに来た！本格的なマルチクラウド時代の Google Cloud
Avatar for maroon1st maroon1st
0
400
サークル参加から学ぶ、小さな事業の回し方
Avatar for yuzneri yuzneri
0
160
【26新卒研修資料】TDD実装演習
Avatar for ディップ株式会社 dip_tech
PRO
0
180
Are We Really Coding 10× Faster with AI?
Avatar for Koichi Yoshida kohzas
0
140
AlarmKitで明後日起きれるアラームアプリを作る
Avatar for Trickart trickart
0
130
How We Benchmarked Quarkus: Patterns and anti-patterns
Avatar for Holly Cummins hollycummins
1
180
UaaL×Androidアプリのメモリ計測 — Memory Profilerの先へ
Avatar for Ryosuke Shimizu (RIO) rio432
0
140
PHPでローカル環境用のSSL/TLS証明書を発行することはできるのか？ #phpconkagawa
Avatar for akase244 akase244
0
350
ローカルLLMでどこまでコードが書けるか / How much code can be written on a local LLM
Avatar for Naoki Kishida kishida
2
340

Featured

See All Featured
The Hidden Cost of Media on the Web [PixelPalooza 2025]
Avatar for Tammy Everts tammyeverts
2
290
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.4k
How to Grow Your eCommerce with AI & Automation
Avatar for Katarina Dahlin katarinadahlin
PRO
1
180
Designing for Performance
Avatar for Lara Hogan lara
611
70k
Neural Spatial Audio Processing for Sound Field Analysis and Control
Avatar for NII S. Koyama's Lab skoyamalab
0
290
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
180
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.4k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.7k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
54k
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
610
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
6
630
Visual Storytelling: How to be a Superhuman Communicator
Avatar for David Neal reverentgeek
2
530

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12