{"id":17204559,"url":"https://github.com/timrots/whatsapp-deobfuscate","last_synced_at":"2025-10-13T00:54:28.151Z","repository":{"id":144501161,"uuid":"188917444","full_name":"TimRots/whatsapp-deobfuscate","owner":"TimRots","description":"poc for WhatsApp for android app secret deobfuscation ","archived":false,"fork":false,"pushed_at":"2019-06-13T12:48:40.000Z","size":5,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-09-05T16:58:10.163Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TimRots.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-05-27T22:43:18.000Z","updated_at":"2023-05-25T21:27:38.000Z","dependencies_parsed_at":null,"dependency_job_id":"8b9aa240-8d16-4f35-9018-a6d032c47765","html_url":"https://github.com/TimRots/whatsapp-deobfuscate","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/TimRots/whatsapp-deobfuscate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TimRots%2Fwhatsapp-deobfuscate","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TimRots%2Fwhatsapp-deobfuscate/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TimRots%2Fwhatsapp-deobfuscate/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TimRots%2Fwhatsapp-deobfuscate/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TimRots","download_url":"https://codeload.github.com/TimRots/whatsapp-deobfuscate/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TimRots%2Fwhatsapp-deobfuscate/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279013646,"owners_count":26085298,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-15T02:22:24.958Z","updated_at":"2025-10-13T00:54:28.122Z","avatar_url":"https://github.com/TimRots.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# whatsapp-deobfuscate\n\n29/05/2019 - Tim Rots / com.whatsapp-2.19.150 / poc for WhatsApp for Android application secret deobfuscation \n\nWhile auditing the com.whatsapp package I stumbled upon the\nclass and instance method(s) which handle deobfuscation of\nthe application's internally used secrets:\n```java\npackage p085d.p241f.p305X;\npublic class C4218b {\n    public static final String f14658a = C4218b.m8240a(\"zffb(==q~{w|fa!\u003cu}}u~w\u003cq}=uw|w`sfwM \\\"\u0026\");\n    public static final String f14659b = C4218b.m8240a(\"zffba(==d\u003cezsfasbb\u003c|wf\");\n    public static final String f14660c = C4218b.m8240a(\"zffba(==d\u003cezsfasbb\u003c|wf=d =wj{af\");\n    public static final String f14678u = C4218b.m8240a(\"esb`{dsqk?fw|}`?%%%$ $**'\u003cga?wsaf?#\u003cw~p\u003cssh}|sea\u003cq}\");\n    ..etc..\n    public static String m8240a(String str) {\n        StringBuilder stringBuilder = new StringBuilder();\n        for (int i = 0; i \u003c str.length(); i++) {\n            stringBuilder.append((char) (str.charAt(i) ^ 18));\n        }\n        return stringBuilder.toString();\n    }\n```\n\nI ported this code to Golang for research and educational purposes.\n\nHow to use:\n```bash\n$ go build com.whatsapp_2.19.150-deobfuscate.go;./com.whatsapp_2.19.150-deobfuscate|grep Deobfuscated\nDeobfuscated: http://clients3.google.com/generate_204\nDeobfuscated: https://v.whatsapp.net\nDeobfuscated: https://v.whatsapp.net/v2/exist\nDeobfuscated: https://v.whatsapp.net/v2/code\nDeobfuscated: https://v.whatsapp.net/v2/register\nDeobfuscated: https://v.whatsapp.net/v2/security\nDeobfuscated: https://www.whatsapp.com/status.php?v=2\nDeobfuscated: https://api.foursquare.com/v2/venues/search\nDeobfuscated: PFUJY2FLEXYLBCXHERGFZIQVW501IVXCXMXSHXNDWDIXUQAT\nDeobfuscated: XQJA0HW2Y1HIYPN2DBMWR3DPPDTHW2E1V33PLAFVRJFEMJS1\nDeobfuscated: 20140601\nDeobfuscated: https://graph.facebook.com/v2.3/\nDeobfuscated: 1609427805955024|f1de6fcdcb11b215ea7a2d3cd062ecff\nDeobfuscated: https://www.bingapis.com/api/v6/images/search\nDeobfuscated: Strict\nDeobfuscated: D41D8CD98F00B204E9800998ECF8427E4F4A7492\nDeobfuscated: Square\nDeobfuscated: ApnLIIIzvjcRC-f8HvE0lXByv6YX8DEtCK63ZQmUqWpJuvcSPTu9rdtpqNUHYG3D\nDeobfuscated: LM4NgcjF-X_EedaZ6MwPVSH0Sac=\nDeobfuscated: SR\nDeobfuscated: waprivacy-tenor-777626885.us-east-1.elb.amazonaws.com\nDeobfuscated: waprivacy-giphy-690867290.us-east-1.elb.amazonaws.com\nDeobfuscated: NX2ZM22Q1B3I\nDeobfuscated: g3Dm3RlhPhuOA\nDeobfuscated: 4j#e*F9+Ms%|g1~5.3rH!we,\n```\n\nI reported this to Facebook's Whitehat program while keeping in mind their Responsible disclosure guidelines.\nOnly after FB confirming this not being a security issue this code has been posted publicly. \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftimrots%2Fwhatsapp-deobfuscate","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftimrots%2Fwhatsapp-deobfuscate","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftimrots%2Fwhatsapp-deobfuscate/lists"}