How Open Source Can Help Your Project w/ Ethan Yonker – BABBQ2014

People have finally recovered from this years Big Android BBQ … more

Add Frequency Bands to Your Qualcomm Device

Those of you who travel quite a bit undoubtedly own more than one device due to frequency band … more

More Android 5.0 Details Revealed, Microsoft Band Fitness Tracker – XDA TV

Google talks more about Android 5.0 Lollipop! That and much … more

Google Allows Search Queries To Interact With Apps

Android 5.0 Lollipop brings lots of new features that are quite useful for end users and … more
Post Reply

[Info]whatsapp security loophole!!!

OP Dhwanik

3rd May 2012, 06:35 PM   |  #11  
Dhwanik's Avatar
OP Senior Member
Flag Mumbai
Thanks Meter: 189
 
225 posts
Join Date:Joined: May 2011
More
Will work on shared n/w i.e. WiFi only
The Following User Says Thank You to Dhwanik For This Useful Post: [ View ]
4th May 2012, 06:09 AM   |  #12  
rampraven's Avatar
Senior Member
Flag Coimbatore
Thanks Meter: 16
 
111 posts
Join Date:Joined: Jan 2011
More
Application has been removed from play store.. Can any one who had tested upload here

Sent from my MT11i using XDA
5th May 2012, 01:41 AM   |  #13  
Junior Member
Thanks Meter: 1
 
5 posts
Join Date:Joined: Mar 2012
More
Glad to hear it only works on WIFI as I don't use WIFI anywhere but at home. But I can't believe they've just been sitting on this for a year. And apparently they have or had other security issues that were handled in questionable ways. Hope all this coverage gains traction and they are forced to address this.
9th May 2012, 03:07 PM   |  #14  
Junior Member
Thanks Meter: 0
 
7 posts
Join Date:Joined: May 2011
Plain Text?
Hi,

I've tried it between my two android devices and sniffed the network traffic with Wireshark (sent a text message in WA). Here is a screenshot where you can see that the whole network traffic was in ssl packets (except the ACK's). I haven't tried the WA sniffer yet but my suggest is that it uses man in the middle attack and if the Whatsapp doesn't verify the SSL certificate the sniffer device can scam with it.

11th May 2012, 06:24 PM   |  #15  
Member
Thanks Meter: 0
 
45 posts
Join Date:Joined: Mar 2008
would like the apk too ....
16th July 2012, 09:17 PM   |  #16  
Junior Member
Thanks Meter: 0
 
3 posts
Join Date:Joined: Jun 2012
Still working now?
Hai guys, recently i try out the application which i download somewhere, it can start spoofing. But does not Catch any conversation. although in same network. So now is not working dy?
see the link for image
wwwdotfacebookdotcom/ajax/messaging/attachment.php?attach_id=16aed27f638191557f7ad738a 30884ce&mid=id.366744480064899&ext=1342473340&hash =AQBwQotNj-CBuI8V
Thanks
Last edited by Johnnny Eng; 16th July 2012 at 09:55 PM. Reason: Wrong link
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes