Whapa is an android whatsapp database parser that automates the process. The main purpose of whapa is to present the data handled by the Sqlite database in a way that is comprehensible to the analyst. The Script is written in Python 2.x
The software is divided into three modes:
+ Message Mode: Analyzes all messages in the database, applying different filters. It extracts thumbnails when they’re availables. “./Media” is the directory where thumbnails are being written. The rows are sorted by timestamp not by id.
+ Decryption Mode: Decryptes the crypto12 databases as long as it has the key.
+ Info Mode: Displays different information about statuses, broadcasts list and groups.
+ Extract Mode: Extracts all thumbnails from the database
If you copy the “wa.db” database into the same directory as the script, the phone number will be displayed along with the name.
Please note that this project is an early stage. As such, you could find errors. Use it at your own risk!
Bonus: It also comes with a tool to download the backup copies of google drive associated with a smartphone.
Use and Download:
git clone https://github.com/B16f00t/whapa && cd whapa
pip install -r ./doc/requirements.txt
python whapa.py -h
whagdext.py (Extracts whatsapp datas from google drive account)
sudo apt-get update
sudo apt-get install -y python3-pip
sudo pip3 install pyportify
edit only the values of the file ./cfg/settings.cfg
gmail = email@example.com
passw = yourpassword
devid = Device ID (optional, if specified get more information)
whagdext.py -help|-vers|-info|-list|-sync|-pull file [backupID]
Show all messages from the database.
python whapa.py -m -tS "12-12-2017 12:00" -tE "13-12-2017 12:00"
Show all messages from 12-12-2017 12:00 to 13-12-2017 12:00.
python whapa.py -m -w -tI
Show all images send by Whatsapp Web.
python whapa.py -m -g 34XXXXXXXXXfirstname.lastname@example.org
Show all messages send by that group.
python whapa.py -m -a -r EN