-
Notifications
You must be signed in to change notification settings - Fork 308
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Negative uin #74
Comments
According to this old article https://www.forensicfocus.com/articles/decrypt-wechat-enmicromsgdb-database/ negative UIN should be concated as string directly. i.e. you can try "-157". Does this work? |
No. If I login to the website, my uin cookie is 272... But even if I force this number for UIN and I use my IMEI from my phone, I still can't decrypt the database. Am I doing something wrong? |
Also if I subtract my two potential UIN (272...) and (-157...), I get 0xFFFFFFFF |
I have WeChat version 7.0.17 and I don't think it can work. I have calculated the MD5 as explained in the referenced article. |
I have run everything and I get:
[10:24:53 [email protected]:wechat] found uin=-157... in system_config_prefs.xml
[10:24:53 [email protected]:wechat] found uin=272... in com.tencent.mm_preferences.xml
[10:24:53 [email protected]:wechat] found uin=-157... in auth_info_key_prefs.xml
[10:24:53 [email protected]:wechat] found uin=-157... in systemInfo.cfg
[10:24:53 [email protected]:wechat] Possible uin: [-157..., 272...]
[10:24:53 [email protected]:wechat] found imei=353... from iphonesubinfo
[10:24:53 [email protected]:wechat] found imei=1234567890ABCDEF in CompatibleInfo.cfg
[10:24:53 [email protected]:wechat] Possible imei: ['353...', '1234567890ABCDEF', '1234567890ABCDEF']
Traceback (most recent call last):
File "/tmp/wechat-dump/decrypt-db.py", line 175, in
key = get_key(imei, uin)
File "/tmp/wechat-dump/decrypt-db.py", line 132, in get_key
a = md5(imei + uin)
TypeError: can't concat int to bytes
I have tried to force the positive uin (272...) in the command line but it doesn't decrypt. Can you please look into this? Is this possible to have a negative uin?
The text was updated successfully, but these errors were encountered: