Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hacking WhatsApp

Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
4
1.3k

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012
Tweet

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
36
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
65
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
420
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
80
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
82
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
110
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
76
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
200

Other Decks in Programming

See All in Programming
Cyrius ーLinux非依存にコンテナをネイティブ実行する専用OSー
Avatar for n4mlz n4mlz
0
250
Symfony + NelmioApiDocBundle を使った スキーマ駆動開発 / Schema Driven Development with NelmioApiDocBundle
Avatar for Shohei Okada okashoi
0
230
今こそ押さえておきたい アマゾンウェブサービス（AWS）の データベースの基礎 おもクラ #6版
Avatar for Satoshi Kaneyasu satoshi256kbyte
1
190
Feature Toggle は捨てやすく使おう
Avatar for gennei gennei
0
360
Fundamentals of Software Engineering In the Age of AI
Avatar for Dan Vega therealdanvega
2
290
我々はなぜ「層」を分けるのか〜「関心の分離」と「抽象化」で手に入れる変更に強いシンプルな設計〜 #phperkaigi / PHPerKaigi 2026
Avatar for shogogg shogogg
2
570
脱 雰囲気実装！ AgentCoreを良い感じに WEBアプリケーションに組み込むために
Avatar for Takuya Yonezawa takuyay0ne
3
400
Windows on Ryzen and I
Avatar for 瀬尾佳隆 seosoft
0
400
飯MCP
Avatar for Yusuke Wada yusukebe
0
370
Strategy for Finding a Problem for OSS: With Real Examples
Avatar for Chikahiro Tokoro kibitan
0
110
Smarter Angular mit Transformers.js & Prompt API
Avatar for Christian Liebel christianliebel
PRO
1
100
Java 21/25 Virtual Threads 소개
Avatar for Sunghyouk Bae (Debop) debop
0
280

Featured

See All Featured
Groundhog Day: Seeking Process in Gaming for Health
Avatar for Sebastian Deterding codingconduct
0
130
The Hidden Cost of Media on the Web [PixelPalooza 2025]
Avatar for Tammy Everts tammyeverts
2
250
Chasing Engaging Ingredients in Design
Avatar for Sebastian Deterding codingconduct
0
150
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.4k
Navigating the moral maze — ethical principles for Al-driven product design
Avatar for Skipper Chong Warson skipperchong
2
310
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.3k
Designing Powerful Visuals for Engaging Learning
Avatar for Mike Taylor tmiket
0
300
Redefining SEO in the New Era of Traffic Generation
Avatar for Szymon Słowik szymonslowik
1
250
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.2k
Effective software design: The role of men in debugging patriarchy in IT @ Voxxed Days AMS
Avatar for Kenny Baas-Schwegler baasie
0
270
Code Review Best Practice
Avatar for Trisha Gee trishagee
74
20k
30 Presentation Tips
Avatar for Ian Lurie portentint
PRO
1
260

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12