Thursday, 12 November 2015

WhatsApp, Obfuscated/Encrypted Strings inside APK



There are a lot of topics in XDA related to WhatsApp
- How to decompile/recompile/Sign Whatsapp.apk
- [TOOL] Whatsapp Xtract: Backup Messages Extractor / Database Analyzer / Chat-Backup
- [Tool] WhatsApp Key/DB Extractor | OFFICIAL | CRYPT8 | NON-ROOT
- [APP][2.1+] WhatCrypt - WhatsApp Database Crypt Tool

But I can't find anything related to Obfuscation Technique used by WhatsApp to Obfuscate Strings inside their Apk.
By seeing WhatsApp.jar using jd-gui.exe, I can only guess that they are using ProGuard, but ProGuard doesn't obfuscate Hardcoded String.

Q) If anyone have idea what tool WhatsApp is using? DexGuard may be?

Q) Or, There might be a possiblity that WhatsApp might be using thier own algorithm to encrypt the strings at runtime?

Any help would be appreciated.
Thanks



No comments:

Post a Comment