Whapa is a whatsapp database parser that automates the process. The main purpose of whapa is to present the data handled by the Sqlite database in a way that is comprehensible to the analyst. The Script is written in Python 2.x
The software is divided into three modes:
- Message Mode: It analyzes all messages in the database, applying different filters. It extracts thumbnails when they're availables.
- Decryption Mode: Decrypt crypto12 databases as long as we have the key.
- Info Mode: Displays different information about statuses, broadcasts list and groups.
Bonus: It also comes with a tool to download the backup copies of google drive associated with a smartphone.
- "Whapas.py" is the spanish version of "whapa.py"
Installation
whapa.py (Whatsapp parser)
You can download the latest version of whapa by cloning the GitHub repository:
git clone https://github.com/B16f00t/whapa.git
then:pip install -r requirements.txt
whagdext.py (Extracts datas from Google Drive Account)
sudo apt-get update
sudo apt-get install -y python3-pip
sudo pip3 install pyportify
To usage:
config settings.cfg
[auth]
gmail = alias@gmail.com
passw = yourpassword
python3 whagdext.py "arguments"
Usage
__ __.__ __________
/ \ / \ |__ _____ \______ \_____
\ \/\/ / | \\__ \ | ___/\__ \
\ /| Y \/ __ \| | / __ \_
\__/\ / |___| (____ /____| (____ /
\/ \/ \/ \/
---------- Whatsapp Parser v0.2 -----------
usage: whapa.py [-h] [-k KEY | -i | -m] [-t TEXT] [-u USER] [-g GROUP] [-w]
[-s] [-b] [-tS TIME_START] [-tE TIME_END]
[-tT | -tI | -tA | -tV | -tC | -tL | -tX | -tP | -tG | -tD | -tR]
[DATABASE]
To start choose a database and a mode with options
positional arguments:
DATABASE database file path - './msgstore.db' by default
optional arguments:
-h, --help show this help message and exit
-k KEY, --key KEY *** Decrypt Mode *** - key file path
-i, --info *** Info Mode ***
-m, --messages *** Message Mode ***
-t TEXT, --text TEXT filter messages by text match
-u USER, --user USER filter messages made by a phone number
-g GROUP, --group GROUP
filter messages made in a group number
-w, --web filter messages made by Whatsapp Web
-s, --starred filter messages starred by user
-b, --broadcast filter messages send by broadcast
-tS TIME_START, --time_start TIME_START
filter messages by start time (dd-mm-yyyy HH:MM)
-tE TIME_END, --time_end TIME_END
filter messages by end time (dd-mm-yyyy HH:MM)
-tT, --type_text filter text messages
-tI, --type_image filter image messages
-tA, --type_audio filter audio messages
-tV, --type_video filter video messages
-tC, --type_contact filter contact messages
-tL, --type_location filter location messages
-tX, --type_call filter audio/video call messages
-tP, --type_application
filter application messages
-tG, --type_gif filter GIF messages
-tD, --type_deleted filter deleted object messages
-tR, --type_share filter Real time location messages
Examples
("./Media" is the directory where thumbnails is being written)
- Message mode:
Show all messages from the database.python whapa.py -m
Show all messages from 12-12-2017 12:00 to 13-12-2017 12:00.python whapa.py -m -tS "12-12-2017 12:00" -tE "13-12-2017 12:00"
Show all images send by Whatsapp Web.python whapa.py -m -w -tI
- Decrypt mode:
Decrypt msgstore.dbcrypt12, creating msgstore.dbpython whapa.py msgstore.db.crypt12 -k key
- Info mode:
Show a stage with options about groups, broadcast lists and statuses.python whapa.py -i