[Kris85]

Hey guys,

I'm really happy to be part of this community now. ✌

The topic of 'hacking' is almost completely new to me. But it all sounds very interesting. I find it remarkable what you can achieve with creativity and perseverance. I'll gradually read up on the topic; your posts are really well-suited for that. 🙂

I don't want to rush into it, but I'd like to start with a rather abstract technical question:

Is it theoretically possible – and realistic – to hack into a third-party WhatsApp account (iOS) in such a way that you gain access to the backup files in the cloud and/or can mirror their account and/or completely take control of their account and lock them out? That is, without physical access to the hardware and without using WhatsApp Web. I was thinking more of an RCE attack using images infected with malware or spyware or something similar. I know that it used to be possible, at least with Androids, and relatively easy to implement. Are there perhaps currently open vulnerabilities for a zero-click attack?

And now a little more concretely: Does anyone have a professional idea or suggestion on how to access - let's say, for simplicity's sake, my own - WhatsApp account? Who is trustworthy and can and wants to support me in such an attempt or project?

Feedback on the concrete implementation is welcome. However, the abstract technical question can of course be discussed here in the post. 🙂

I would be very pleased to see a lot of participation. 🙂 Please no scammers ;D

I'm looking forward to a good and successful neighborhood XD

Kris

[DramaKing]

You can if you're so incredibly lucky as to get access to iCloud.

Your idea of using images with RCE is dated, hopeless, and such an exploit has never been public. You'd almost certainly have to exploit the WhatsApp app directly, too, because iOS is extremely restricted. Android is a completely different ball of wax because it allows sideloading, though it also is becoming increasingly secured and restrictive. If there were zero-day zero-click attacks, you couldn't possibly afford them. Last figure I saw was $20 million USD.

[gaussiana]

Hi, I can access iCloud, can you contact me to give me more details? Thanks

---

You can if you're so incredibly lucky as to get access to iCloud.

Your idea of using images with RCE is dated, hopeless, and such an exploit has never been public. You'd almost certainly have to exploit the WhatsApp app directly, too, because iOS is extremely restricted. Android is a completely different ball of wax because it allows sideloading, though it also is becoming increasingly secured and restrictive. If there were zero-day zero-click attacks, you couldn't possibly afford them. Last figure I saw was $20 million USD.

Hi, I can access iCloud, could you please give me more details? Thanks