WhatsApp Xtract

I don’t want to bore you explaining what is WhatsApp. If you have this serious gap, you can fill it here.  Forensically speaking, WhatsApp was a very cool app until the last June. After that, someone had decided to add the extension “crypt” to such excellent source of information which was msgstore.db.

This database stores information about contacts and also entire conversations. But simply opening it with SQLite Browser, you can have some troubles in extracting a single chat session with a desired contact, or in reordering the messages. My last python script wants to overcome these problems, avoiding to deal with complex SQL queries.

Now, you need only to decrypt that file! Go to the repo.


Popular posts from this blog

Huawei backup decryptor

iOS 15 Image Forensics Analysis and Tools Comparison - Processing details and general device information

A first look at Android 14 forensics