Comment on A clickjacking vulnerability in WhatsApp that enables phishing attacksparentComments−isaacfrond2yThat was the initial idea, but it failed because Whatsapp traffic is end to end encrytped. The second idea, which actually worked, was to put a breakpoint in Whatsapp while running in an emulator.−LelouBil2yNo, not an emulator. Just using your browser's JavaScript debugger.You can do that on any website.−flutas2yYeah, the article also says "WA web’s javascript was uglified and minified, however after a while of searching I found the right place."
Comments
That was the initial idea, but it failed because Whatsapp traffic is end to end encrytped. The second idea, which actually worked, was to put a breakpoint in Whatsapp while running in an emulator.
No, not an emulator. Just using your browser's JavaScript debugger.
You can do that on any website.
Yeah, the article also says "WA web’s javascript was uglified and minified, however after a while of searching I found the right place."