Comment on A clickjacking vulnerability in WhatsApp that enables phishing attacksparentComments−ajb2yThe article says "I decided to intercept a message via WA web".−isaacfrond2yThat was the initial idea, but it failed because Whatsapp traffic is end to end encrytped. The second idea, which actually worked, was to put a breakpoint in Whatsapp while running in an emulator.−LelouBil2yNo, not an emulator. Just using your browser's JavaScript debugger.You can do that on any website.−flutas2yYeah, the article also says "WA web’s javascript was uglified and minified, however after a while of searching I found the right place."
Comments
The article says "I decided to intercept a message via WA web".
That was the initial idea, but it failed because Whatsapp traffic is end to end encrytped. The second idea, which actually worked, was to put a breakpoint in Whatsapp while running in an emulator.
No, not an emulator. Just using your browser's JavaScript debugger.
You can do that on any website.
Yeah, the article also says "WA web’s javascript was uglified and minified, however after a while of searching I found the right place."