RobCarloz! rcsdk
rcsdk
/ check_wadump_repo_20250430_095055.log
Created
April 30, 2025 12:50
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === wadump-py Repository Check Started: qua 30 abr 2025 09:50:55 -03 === | |
| Searching for directory 'wadump-py' containing 'wadump.py'... | |
| Target file for path output: /home/rc/proof/whats_dump/preflight_logs/wadump_repo_path.txt | |
| Checking WADUMP_PY_DIR environment variable... | |
| [INFO] WADUMP_PY_DIR environment variable not set or empty. | |
| Searching common directories: /home/rc/tools /home/rc/git /home/rc/src /home/rc/projects /home/rc/Downloads /home/rc/tools/wadump | |
| Checking: /home/rc/tools/wadump-py | |
| Checking: /home/rc/git/wadump-py | |
| find: ‘/home/rc/git’: No such file or directory | |
| Checking: /home/rc/src/wadump-py |
rcsdk
/ extraction.log
Created
April 30, 2025 12:49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === WhatsApp Media Extraction === | |
| Discovered Cache: | |
| [×] CRITICAL: No Chrome Cache found! |
rcsdk
/ media_check_log_20250430_093715.log
Created
April 30, 2025 12:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ########################################################### | |
| ### WhatsApp Media Output Investigation - Start ### | |
| Target Case Directory: /home/rc/proof/whats_dump/case_20250430_091511 | |
| Timestamp: qua 30 abr 2025 09:37:15 -03 | |
| ########################################################### | |
| [*] 1. Checking contents of output directory: /home/rc/proof/whats_dump/case_20250430_091511/all_output | |
| [+] Listing contents (-lha): | |
| total 8,0K | |
| drwxr-xr-x 2 rc rc 4,0K abr 30 09:15 . |
rcsdk
/ check_wadump_repo_20250430_093459.log
Created
April 30, 2025 12:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === wadump-py Repository Check Started: qua 30 abr 2025 09:34:59 -03 === | |
| Searching for directory 'wadump-py' containing 'wadump.py'... | |
| Target file for path output: /home/rc/proof/whats_dump/preflight_logs/wadump_repo_path.txt | |
| Checking WADUMP_PY_DIR environment variable... | |
| [INFO] WADUMP_PY_DIR environment variable not set or empty. | |
| Searching common directories: /home/rc/tools /home/rc/git /home/rc/src /home/rc/projects /home/rc/Downloads /home/rc/tools/wadump | |
| Checking: /home/rc/tools/wadump-py | |
| Checking: /home/rc/git/wadump-py | |
| Checking: /home/rc/src/wadump-py | |
| Checking: /home/rc/projects/wadump-py |
rcsdk
/ extraction.log
Created
April 30, 2025 12:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === WhatsApp Nuclear Extraction === | |
| Started: qua 30 abr 2025 09:24:31 -03 | |
| Target DB: /home/rc/.config/google-chrome/Profile 1/IndexedDB/https_web.whatsapp.com_0.indexeddb.leveldb | |
| [!] Snapshotting IndexedDB... | |
| sending incremental file list | |
| created directory /home/rc/proof/whatsapp_20250430_092431/raw/leveldb_snapshot | |
| ./ | |
| 000149.ldb | |
| 000150.log |
rcsdk
/ check_wadump_repo_20250430_092351.log
Created
April 30, 2025 12:23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === wadump-py Repository Check Started: qua 30 abr 2025 09:23:51 -03 === | |
| Searching for directory 'wadump-py' containing 'wadump.py'... | |
| Target file for path output: /home/rc/proof/whats_dump/preflight_logs/wadump_repo_path.txt | |
| Checking WADUMP_PY_DIR environment variable... | |
| [INFO] WADUMP_PY_DIR environment variable not set or empty. | |
| Searching common directories: /home/rc/tools /home/rc/git /home/rc/src /home/rc/projects /home/rc/Downloads /home/rc/tools/wadump | |
| Checking: /home/rc/tools/wadump-py | |
| Checking: /home/rc/git/wadump-py | |
| Checking: /home/rc/src/wadump-py | |
| Checking: /home/rc/projects/wadump-py |
rcsdk
/ extraction_log_20250430_091511.log
Created
April 30, 2025 12:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ########################################################### | |
| ### WhatsApp Web Forensic Extraction - Start ### | |
| Case Directory: /home/rc/proof/whats_dump/case_20250430_091511 | |
| Timestamp: qua 30 abr 2025 09:15:11 -03 | |
| ########################################################### | |
| [*] Performing prerequisite checks... | |
| [+] Prerequisite checks passed (or warnings noted). | |
| [*] Setting up Python virtual environment at /home/rc/tools/wadump/venv... |
rcsdk
/ preflight_check_20250430_090418.log
Created
April 30, 2025 12:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === Pre-Flight Check Started: qua 30 abr 2025 09:04:18 -03 === | |
| Running as user: rc | |
| Current directory: /home/rc/tools | |
| [Check 1] Source DB Directory: /home/rc/.config/google-chrome/Profile 1/IndexedDB/https_web.whatsapp.com_0.indexeddb.leveldb | |
| [OK] Source directory exists. | |
| [OK] Source directory is readable. | |
| [Check 2] Base Work Directory: /home/rc/proof/whats_dump/ | |
| [OK] Work directory exists. |
rcsdk
/ forensic_extraction.log
Created
April 30, 2025 12:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === WhatsApp Forensic Extraction === | |
| Targets: Pimenta (+55 21 97004-5625), Rodrigo (+55 21 98877-2203) | |
| Timestamp: qua 30 abr 2025 09:02:45 -03 | |
| [!] Setting up wadump... | |
| Cloning into '/home/rc/whatsapp_forensic_20250430_090245/wadump'... | |
| ERROR: Could not open requirements file: [Errno 2] No such file or directory: 'requirements.txt' | |
| [!] Extracting WhatsApp data... | |
| python3: can't open file '/home/rc/whatsapp_forensic_20250430_090245/wadump/wadump.py': [Errno 2] No such file or directory |
rcsdk
/ preflight_check_20250430_085444.log
Created
April 30, 2025 11:54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === Pre-Flight Check Started: qua 30 abr 2025 08:54:44 -03 === | |
| Running as user: rc | |
| Current directory: /home/rc/tools | |
| [Check 1] Source DB Directory: /home/rc/.config/google-chrome/Profile 1/IndexedDB/https_web.whatsapp.com_0.indexeddb.leveldb | |
| [OK] Source directory exists. | |
| [OK] Source directory is readable. | |
| [Check 2] Base Work Directory: /home/rc/proof/whats_dump/ | |
| [OK] Work directory exists. |