sigalor/whatsapp-web-reveng
Whatsapp Web Reveng
This project is a reverse engineering implementation and library designed to parse and decrypt the binary data streams used by the WhatsApp web client. It provides a WebSocket client library and tools to communicate with messaging servers by implementing reverse engineered protocol patterns.
The system enables the development of custom clients and automation tools through the emulation of browser sessions and the management of persistent binary streams. It handles account authentication via QR code generation and pairing strings to link devices and maintain encrypted sessions.
The project covers a wide range of cryptographic and data processing capabilities, including symmetric key decryption using AES and HMAC, HKDF-based key derivation, and the conversion of raw binary server streams into structured JSON. It also includes utilities for encrypted media uploads via multipart requests and the decryption of media files.
Features
- Custom WhatsApp Clients - Provides the underlying protocol and binary stream capabilities required to build alternative WhatsApp client applications.
- Binary and Text File Parsing - Transforms raw binary message streams from the server into structured JSON records.
- Binary Stream Parsing - Transforms raw binary server streams into structured JSON objects by mapping byte sequences to data fields.
- Binary-to-JSON Converters - Provides converters that transform binary server data streams into human-readable JSON objects.
- Account Session Managers - Maintains persistent connectivity and handles account authentication via QR code pairing.
- WhatsApp Integrations - Enables the exchange of text and media by implementing the specific WebSocket protocol used by web clients.
- Session Controllers - Manages the creation, authentication, and lifecycle of sessions via QR code scanning.
- WebSocket Protocol Bridges - Provides a WebSocket bridge to emulate a browser client session for sending and receiving messages.
- Messaging Automation Clients - Implements a library for building automated bots by simulating web-based user sessions.
- Real-Time Connections - Manages persistent WebSocket connections for the real-time exchange of binary data streams.
- Session Establishment - Establishes secure encrypted communication channels using specific HTTP headers and protocol initialization sequences.
- Network Protocol Parsing - Parses binary data streams from the messaging protocol to extract structured message data.
- Session Key Derivation - Uses HKDF to derive unique encryption keys for messages and media from shared secrets.
- Message Decryption - Decrypts incoming messages and media using AES and HMAC validation with derived session keys.
- WhatsApp Session Lifecycles - Manages the full session lifecycle, including login, token-based resumption, and secure logout.
- Network Payload Decryptions - Decrypts binary WebSocket payloads from network traffic to access messaging data.
- WhatsApp Session Initiations - Initializes active user sessions by connecting to servers using client identifiers and browser descriptions.
- Protocol Reverse Engineering - Implements a reverse engineered version of the binary data streams used by the web client.
- API Reverse Engineering - Implements reverse engineered WebSocket communication patterns to interact with undocumented messaging server APIs.
- Binary WebSocket Protocols - Implements a binary WebSocket protocol to exchange real-time messaging data via persistent streams.
- Authentication QR Codes - Generates pairing strings and QR codes to link mobile accounts to the client session.
- Client Session Emulators - Mimics browser identifiers and handshake sequences to emulate official client behavior for session validation.
- QR Code & Phone Verification Logins - Creates scannable QR codes using server identifiers and public keys to authenticate devices.
- Group Chat Administration - Resolves unique standardized identifiers to identify and manage individual users, group chats, and broadcast channels.
- Media Decryption - Recovers original media files using specific cryptographic keys and HMAC validation.
- Media Decryption - Implements cryptographic sequences to decrypt image and video assets from secure sessions.
- QR Code Pairing - Links accounts by generating scannable pairing strings from server public keys and client identifiers.
- Multipart Form Uploads - Uploads encrypted media files to servers using the standard HTTP multipart/form-data format.
- Encrypted Media Uploads - Encrypts files using AES-CBC and HKDF before uploading them via multipart-form requests.
- Reverse Engineering Projects - Reverse engineering and reimplementation of web APIs.
