开源了 macOS 微信数据库解密

下载中。

[96.3%] 0/26 keys found, 0 hex patterns, 3394/3524 MB
[99.2%] 0/26 keys found, 0 hex patterns, 3496/3524 MB
[99.4%] 0/26 keys found, 0 hex patterns, 3502/3524 MB
[99.8%] 0/26 keys found, 0 hex patterns, 3517/3524 MB
[100.0%] 0/26 keys found, 0 hex patterns, 3524/3524 MB

[*] Detached from WeChat.

============================================================
Results: 0/26 keys found
❌ hardlink/hardlink.db (salt=11e893ca0b414b27587b932ca4)
❌ head_image/head_image.db (salt=19b00effe9fcee47486646)


[*] Keys saved to wechat_keys.json

[!] Missing keys for: hardlink/hardlink.db, head_image/head_image.db, solitaire/solitaire.db, contact/contact_fts.db, contact/contact.db, sns/sns.db, general/general.db, message/message_1.db, message/message_fts.db, message/message_4.db, message/message_0.db, message/biz_message_3.db, message/media_0.db, message/biz_message_2.db, message/biz_message_1.db, message/message_resource.db, message/biz_message_0.db, message/biz_message_4.db, message/message_3.db, message/message_2.db, favorite/favorite.db, favorite/favorite_fts.db, emoticon/emoticon.db, migrate/unspportmsg.db, bizchat/bizchat.db, session/session.db
(base) tt@MacBookPro wechat-db-decrypt-macos % PYTHONPATH=$(lldb -P) /usr/bin/python3 find_key.py
[*] Attaching to WeChat...
[+] Attached to WeChat (PID: 1594)
[*] WeChat __TEXT,__text: 0x104000 - 0x109f1e548
[*] malloc at 0x18894eca8
[*] Found 13 mov x0/w0, #0x43 instructions
[+] Found mov w0, #0x43 at 0x1003fc + bl malloc
[+] -> In function ___lldb_unnamed_symbol255627 at 0x10860a2d4
[+] setCipherKey function: 0x10860a2d4 (___lldb_unnamed_symbol255627)
[+] Set breakpoint at 0x10860a2d4
[*] Continuing to collect keys. Press Ctrl+C to stop.
[*] Scanning db files in: /Users/wang/Library/Containers/com.tencent.xinWeChat/Data/Documents/xwechat_files/wjx009_549c/db_storage
[*] Found 26 unique salts across db files
[*] Loaded 0 existing entries from wechat_keys.json

卡在这里了，失败了？
微信版本是最新的 4.1.7.1

可以了，但是目前解密的都是群聊，私聊的解密不了？
提示如需了解更多，可以直接查看与他的私聊记录，但目前因数据库加密问题暂时无法调取。

都可以啊，我自己都是成功了的
@wsbqdyhm

@jakevin 目前成功导出，礼貌问询导出的私聊文件里面是没有发言人的，可以区别吗