±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34287
New Yesterday: 0 Visitors: 220

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Oxygen Forensic - Decrypt WhatsApp Backups

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 5:02 am

Hi,

According to Oxygen Forensic latest release, they announced support for WhatsApp backup decryption.
blog.oxygen-forensic.c...ductUpdate


n some cases, you may have a WhatsApp backup file extracted from an SD card or the internal "memory of an Android device, but you do not have a key file to decrypt it."


Anyone know where or how I can get the backup file? iOS/Android?

Thanks  

John000
Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 7:01 am

There can be cases when a forensic expert has a WhatsApp backup from an SD card of an Android device but has no key file to decrypt it. So for such cases we've introduced this alternative method of WhatsApp backup decryption via phone number or a special WhatsApp Cloud token that can be extracted in our software. If you need more details on this method please contact our support directly via email or call from our website.  

OxygenForensics
Senior Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 7:32 am

if the phone number\sim is active you can recreate the key file on any android device. preferably one with easier access to files or rooted.  

edigama25
Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 7:36 am

- OxygenForensics
There can be cases when a forensic expert has a WhatsApp backup from an SD card of an Android device but has no key file to decrypt it. So for such cases we've introduced this alternative method of WhatsApp backup decryption via phone number or a special WhatsApp Cloud token that can be extracted in our software. If you need more details on this method please contact our support directly via email or call from our website.


This is great, Thanks!
But where do I find the backup on the SD card? it there any specific location?  

John000
Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 8:05 am

Usually, you can find it in sdcard\WhatsApp\Databases folder.  

OxygenForensics
Senior Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Thu Aug 09, 2018 8:13 am

Will test it soon.
Thanks for your help.

BR,
John  

John000
Member
 
 
  

Re: Oxygen Forensic - Decrypt WhatsApp Backups

Post Posted: Sun Aug 12, 2018 1:00 am

- OxygenForensics
Usually, you can find it in sdcard\WhatsApp\Databases folder.


Hi,

I wanted to examine it but couldn't find any record for Whatsapp Backup on a few devices with SD card.
All of the backups automatically uploaded to Google Drive.

1. Is there any way to download the backup from Google Drive?
2. If not, do you know on which Android version it's possible to backup to the SD card?


Thanks.  

John000
Member
 
 

Page 1 of 2
Go to page 1, 2  Next