InfoSecBulletin Cybersecurity for mankind
Developer ElDavoo unveils a new open source tool named “WhatsApp Crypt Tools” . It makes it easier to access WhatsApp’s end-to-end encrypted backups, which hold chat histories, media, and metadata in SQLite databases or ZIP files.
The wa-crypt-tools program, available on GitHub, decrypts and encrypts .crypt12, .crypt14, and .crypt15 files from WhatsApp and WhatsApp Business, provided users supply the required key file or 64-character key.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
The tool supports protobuf for modern formats and works well with forensics suites like Whapa for advanced analysis. Users can easily deploy it without local setup. Google Colab provides a browser notebook for quick tests, making it ideal for non-technical users or cloud workflows.
Locally, install via pip with “python -m pip install wa-crypt-tools” for stable builds or the GitHub URL for development versions; Jupyter notebooks suit data scientists familiar with the environment.
Decryption shines with the wadecrypt command: “wadecrypt encrypted_backup.key msgstore.db.crypt15 msgstore.db” yields a readable SQLite file after loading the Crypt15 key.
Encryption via waencrypt remains beta, recommending a reference crypt15 file for reliability, as in “waencrypt –reference msgstore.db.crypt15 key msgstore.db new.crypt15.” Additional utilities like wainfo inspect backups, wacreatekey generates keys, and waguess attempt brute-force guesses.
Cybersecurity experts can use this tool for mobile investigations, retrieving data from modified Android devices at /data/data/com.whatsapp/files/key.
Research papers examine disappearing messages and injection attacks in E2EE apps, while YouTube and XDA tutorials guide users on recovering .crypt15 backups through ADB pulls. It also supports undocumented .mcrypt1 Google Drive files.
Decryption requires key passwords; these only secure key retrieval from WhatsApp servers. Newer app versions (tested last on 2.24.x) have compatibility issues, including crypt15 failures that need force flags or developer help on Telegram.
Experts suggest using secure backups without passwords and self-managed keys to protect data. This tool allows data recovery without rooting devices and highlights WhatsApp’s strong encryption when keys are kept safe.
