Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hacking WhatsApp

Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
4
1.3k

Hacking WhatsApp

GDG Presentation
Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012
Tweet

More Decks by Enrique López Mañas

See All by Enrique López Mañas
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
47
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
130
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
70
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
72
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
89
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
65
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
190
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
160

Other Decks in Programming

See All in Programming
レベル1の開発生産性向上に取り組む − 日々の作業の効率化・自動化を通じた改善活動
Avatar for kesoji kesoji
0
300
ふつうの技術スタックでアート作品を作ってみる
Avatar for Akira Yagi akira888
1
1.3k
Google Agent Development Kit でLINE Botを作ってみた
Avatar for Kento.Yamada ymd65536
2
260
猫と暮らす Google Nest Cam生活🐈 / WebRTC with Google Nest Cam
Avatar for Yutaro Muta yutailang0119
0
170
Advanced Micro Frontends: Multi Version/ Framework Scenarios @WAD 2025, Berlin
Avatar for Manfred Steyer manfredsteyer
PRO
0
390
AWS Summit Japan 2024と2025の比較／はじめてのKiro、今あなたは岐路に立つ
Avatar for Satoshi Kaneyasu satoshi256kbyte
0
120
ニーリーにおけるプロダクトエンジニア
Avatar for Nealle nealle
0
950
Vibe Codingの幻想を超えて-生成AIを現場で使えるようにするまでの泥臭い話.ai
Avatar for Kuu fumiyakume
10
4.3k
AI時代の『改訂新版 良いコード／悪いコードで学ぶ設計入門』 / ai-good-code-bad-code
Avatar for MinoDriven minodriven
24
9.6k
The Modern View Layer Rails Deserves: A Vision For 2025 And Beyond @ RailsConf 2025, Philadelphia, PA
Avatar for Marco Roth marcoroth
2
730
システム成長を止めない！本番無停止テーブル移行の全貌
Avatar for さかうぇ sakawe_ee
1
360
MDN Web Docs に日本語翻訳でコントリビュートしたくなる
Avatar for uutan1108 ohmori_yusuke
1
130

Featured

See All Featured
BBQ
Avatar for Matthew Crist matthewcrist
89
9.7k
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
233
17k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
25
1.7k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
31
8.7k
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
223
9.7k
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.5k
Git: the NoSQL Database
Avatar for Brandon Keepers bkeepers
PRO
430
65k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
138
34k
Building Flexible Design Systems
Avatar for Yesenia Perez-Cruz yeseniaperezcruz
328
39k
Adopting Sorbet at Scale
Avatar for Ufuk Kayserilioglu ufuk
77
9.5k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
32
2.4k
Visualization
Avatar for Eitan Lees eitanlees
146
16k

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12