InfoSecBulletin Cybersecurity for mankind
Developer ElDavoo unveils a new open source tool named “WhatsApp Crypt Tools” . It makes it easier to access WhatsApp’s end-to-end encrypted backups, which hold chat histories, media, and metadata in SQLite databases or ZIP files.
The wa-crypt-tools program, available on GitHub, decrypts and encrypts .crypt12, .crypt14, and .crypt15 files from WhatsApp and WhatsApp Business, provided users supply the required key file or 64-character key.
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
The tool supports protobuf for modern formats and works well with forensics suites like Whapa for advanced analysis. Users can easily deploy it without local setup. Google Colab provides a browser notebook for quick tests, making it ideal for non-technical users or cloud workflows.
Locally, install via pip with “python -m pip install wa-crypt-tools” for stable builds or the GitHub URL for development versions; Jupyter notebooks suit data scientists familiar with the environment.
Decryption shines with the wadecrypt command: “wadecrypt encrypted_backup.key msgstore.db.crypt15 msgstore.db” yields a readable SQLite file after loading the Crypt15 key.
Encryption via waencrypt remains beta, recommending a reference crypt15 file for reliability, as in “waencrypt –reference msgstore.db.crypt15 key msgstore.db new.crypt15.” Additional utilities like wainfo inspect backups, wacreatekey generates keys, and waguess attempt brute-force guesses.
Cybersecurity experts can use this tool for mobile investigations, retrieving data from modified Android devices at /data/data/com.whatsapp/files/key.
Research papers examine disappearing messages and injection attacks in E2EE apps, while YouTube and XDA tutorials guide users on recovering .crypt15 backups through ADB pulls. It also supports undocumented .mcrypt1 Google Drive files.
Decryption requires key passwords; these only secure key retrieval from WhatsApp servers. Newer app versions (tested last on 2.24.x) have compatibility issues, including crypt15 failures that need force flags or developer help on Telegram.
Experts suggest using secure backups without passwords and self-managed keys to protect data. This tool allows data recovery without rooting devices and highlights WhatsApp’s strong encryption when keys are kept safe.
