mirror of
https://github.com/mvt-project/mvt.git
synced 2026-09-03 16:41:05 +02:00
Donncha Ó Cearbhaill
6b0c439d1c
Extract ZABOUTEXPIRATIONTIMESTAMP and emit a timeline event for each timestamp stored on a WhatsApp contact record: disappearing messages timer changes, "about" text changes and scheduled expiry, and contact record updates. ContactsV2.sqlite stores no other date attributes in any released schema version.
84 lines
3.2 KiB
Python
84 lines
3.2 KiB
Python
# Mobile Verification Toolkit (MVT)
|
|
# Copyright (c) 2021-2026 The MVT Authors.
|
|
# Use of this software is governed by the MVT License 1.1 that can be found at
|
|
# https://license.mvt.re/1.1/
|
|
|
|
from mvt.common.module import run_module
|
|
from mvt.ios.modules.mixed.whatsapp_contacts import WhatsappContacts
|
|
|
|
from ..utils import get_ios_backup_folder
|
|
|
|
|
|
class TestWhatsappContactsModule:
|
|
def test_extraction(self):
|
|
m = WhatsappContacts(target_path=get_ios_backup_folder())
|
|
run_module(m)
|
|
assert len(m.results) == 2
|
|
|
|
alice = next(r for r in m.results if r["given_name"] == "Alice")
|
|
assert alice["full_name"] == "Alice Example"
|
|
assert alice["phone_number"] == "+14155550100"
|
|
assert alice["whatsapp_id"] == "14155550100@s.whatsapp.net"
|
|
assert alice["lid"] == "100000000000001@lid"
|
|
assert alice["user_name"] == "alice.example"
|
|
assert alice["disappearing_mode_duration"] == 86400.0
|
|
assert alice["disappearing_mode_is_on"] is True
|
|
assert alice["disappearing_mode_label"] == "24 hours"
|
|
assert alice["disappearing_mode_timestamp"] == "2025-07-23 21:46:40.000000"
|
|
assert alice["about_timestamp"] == "2025-07-12 08:00:00.000000"
|
|
assert alice["about_expiration_timestamp"] == "2025-08-16 01:20:00.000000"
|
|
assert alice["last_updated"] == "2025-08-04 11:33:20.000000"
|
|
|
|
bob = next(r for r in m.results if r["given_name"] == "Bob")
|
|
assert bob["lid"] is None
|
|
assert bob["disappearing_mode_duration"] is None
|
|
assert bob["disappearing_mode_is_on"] is False
|
|
assert bob["disappearing_mode_label"] == "off"
|
|
assert bob["disappearing_mode_timestamp"] is None
|
|
|
|
# Alice: disappearing_mode_set, about_changed, about_expiration and
|
|
# contact_last_updated. Bob: contact_last_updated only.
|
|
assert len(m.timeline) == 5
|
|
|
|
events = {
|
|
(entry["event"], entry["timestamp"]): entry["data"]
|
|
for entry in m.timeline
|
|
}
|
|
assert (
|
|
"24 hours"
|
|
in events[("disappearing_mode_set", "2025-07-23 21:46:40.000000")]
|
|
)
|
|
assert (
|
|
"14155550100@s.whatsapp.net (Alice Example)"
|
|
in events[("disappearing_mode_set", "2025-07-23 21:46:40.000000")]
|
|
)
|
|
assert (
|
|
'changed to "Hey there! I am using WhatsApp."'
|
|
in events[("about_changed", "2025-07-12 08:00:00.000000")]
|
|
)
|
|
assert (
|
|
"scheduled to expire"
|
|
in events[("about_expiration", "2025-08-16 01:20:00.000000")]
|
|
)
|
|
|
|
updated = [
|
|
entry["data"]
|
|
for entry in m.timeline
|
|
if entry["event"] == "contact_last_updated"
|
|
]
|
|
assert len(updated) == 2
|
|
assert all(
|
|
entry["timestamp"] == "2025-08-04 11:33:20.000000"
|
|
for entry in m.timeline
|
|
if entry["event"] == "contact_last_updated"
|
|
)
|
|
assert any("14155550101@s.whatsapp.net (Bob Example)" in d for d in updated)
|
|
|
|
assert len(m.alertstore.alerts) == 0
|
|
|
|
def test_missing_database(self, tmp_path):
|
|
m = WhatsappContacts(target_path=str(tmp_path))
|
|
run_module(m)
|
|
assert m.results == []
|
|
assert len(m.alertstore.alerts) == 0
|