whapa v1.42 releases: WhatsApp Parser Toolset
Whatsapp Parser Toolset
Updated: February 2021
WhatsApp Messenger Version 220.127.116.11
Whapa is a forensic graphical toolset for analyzing WhatsApp in android. All the tools have been written in Python 3.X and have been tested on Linux and Windows 10 systems.
It is divided into four tools:
- Whapa (Whatsapp Parser)
- Whamerge (Whatsapp Merger)
- Whagodri (Whataspp Google Drive Extractor)
- Whacipher (Whatsapp Encryption/Decryption)
[+] whapa-gui.py v1.42
[-] Error parsing phonenumber fixed.
[+] whapa-gui.py v1.41
[-] Settings file fixed
[+] whapa-gui.py v1.40
[-] New minimal design
[-] New tool WhaChat
[-] New tool to export chat from IOs and Android
[-] Many bugs Fixed
git clone https://github.com/B16f00t/whapa.git
pip install -r ./doc/requirements.txt
if you use the Linux system:
- python3 whapa-gui.py
if you use Windows system:
- python whapa-gui.py or
- click on whapa-gui.bat
whapa.py is an android WhatsApp database parser which automates the process and presents the data handled by the SQLite database in a way that is comprehensible to the analyst. The software is divided into four modes:
- Message Mode: Analyzes all messages in the database, applying different filters. It extracts thumbnails when they’re available. “./Media” is the directory where thumbnails are being written. The rows are sorted by timestamp, not by id.
- Decryption Mode: Decrypts the crypto12 databases as long as it has the key.
- Info Mode: Displays different information about statuses, broadcasts list and groups.
- Extract Mode: Extracts all thumbnails from the database
If you copy the “wa.db” database into the same directory as the script, the phone number will be displayed along with the name.
Please note that this project is an early stage. As such, you could find errors. Use it at your own risk!
whademe is a tool to decrypt directories containing backups and join them in a new database, to be able to be analyzed and obtain more information, such as deleted groups, messages, etc…
whagodri.py is a tool which allows WhatsApp users on Android to extract their backed up WhatsApp data from Google Drive.
Make sure of:
- Disable 2FA in your Google Account
- Download the latest version of whapa
- Install the requirements
Edit only the values of the./cfg/settings.cfg file
- If you request it, log in to your browser and then click here, https://accounts.google.com/DisplayUnlockCaptcha.
whacipher.py is a tool which allows decrypt or encrypt WhatsApp database. You must have the key of your phone to decrypt, and additionally an encrypted database as a reference to encrypt a new database.
Copyright (C) 2018 B16f00t