From 57f51ac62efb0b68e2550b88661347335c3fa641 Mon Sep 17 00:00:00 2001 From: Knugi <24708955+KnugiHK@users.noreply.github.com> Date: Sun, 11 Jul 2021 03:13:15 +0000 Subject: [PATCH] Created Android Usage (markdown) --- Android-Usage.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 Android-Usage.md diff --git a/Android-Usage.md b/Android-Usage.md new file mode 100644 index 0000000..e8f25aa --- /dev/null +++ b/Android-Usage.md @@ -0,0 +1,30 @@ +# Working with Android +## Unencrypted WhatsApp database +Extract the WhatsApp database with whatever means, one possible means is to use the [WhatsApp-Key-DB-Extractor](https://github.com/KnugiHK/WhatsApp-Key-DB-Extractor) + +After you obtain your WhatsApp databse, copy the WhatsApp database and media folder to the working directory. The database is called msgstore.db. If you also want the name of your contacts, get the contact database, which is called wa.db. And copy the WhatsApp (Media) directory from your phone directly. + +And now, you should have something like this in the working directory. + +![Android folder structure](imgs/android_structure.png) +### Extracting +Simply invoke the following command from shell. +```sh +wtsexporter -a +``` + +## Encrypted Android WhatsApp Backup (crypt14) +In order to support the decryption, install pycryptodome if it is not installed +```sh +pip install pycryptodome +``` +Place the decryption key file (key) and the encrypted WhatsApp Backup (msgstore.db.crypt14) in the working directory. If you also want the name of your contacts, get the contact database, which is called wa.db. And copy the WhatsApp (Media) directory from your phone directly. + +And now, you should have something like this in the working directory. + +![Android folder structure with WhatsApp Backup](imgs/android_structure_backup.png) +### Extracting +Simply invoke the following command from shell. +```sh +wtsexporter -a -k key -b msgstore.db.crypt14 +``` \ No newline at end of file