Case study
WeChat: recovering macOS chat databases for HTML export
The WeChat export investigation recovers chat data from WeChat 4.x for macOS. A Frida hook captures keys passed to CommonCrypto's CCCryptorCreate; Python scripts match the per-database keys to SQLCipher stores, decrypt the files, parse contact and message tables, and generate browser-readable HTML. The documentation records database paths and message-layout differences.
- Targets
- App
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 1
- Last commit
- 2026-06-12
- Language
- Python
GitHub data as of 2026-11-10
Evidence
- Observed
- Code and documentation observed; no download method or demo found.
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: Requires WeChat 4.x on macOS 13+ with access to the user's local databases.
- Prerequisites: Requires Python 3.10+, Frida and the sqlcipher CLI; Frida injection may require SIP changes or signing authorization.
- Scope: The project specifies personal study, research and backup of one's own chat data.
- License: No licence file in the repository.
Cite
BibTeX
@misc{wechat-export-case,
title = {{WeChat: recovering macOS chat databases for HTML export}},
howpublished = {\url{https://github.com/patients760/wechat-export}},
url = {https://github.com/patients760/wechat-export},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/wechat-export-case/}}
}Plain text
WeChat: recovering macOS chat databases for HTML export. https://github.com/patients760/wechat-export (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/wechat-export-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · patients760/wechat-export · Revision 783b4a5
- article_reddit.md GitHub · patients760/wechat-export · Revision 783b4a5
More in Apps
- led-hue-cycle: reconstructing LEDDMX strip control over BLE · Case study
- OPPO 移动电源助手: reconstructing power bank control on macOS · Case study
- LaMetric TIME Recovery Toolkit: recovering the clock setup API · Case study
- AvellSucks: reconstructing Avell laptop EC controls · Case study
- PodFlick: reconstructing iPod Video library editing · Case study
- Vcf-compiler: reconstructing the VCutWorks VCF file format · Case study