TGViewer
cKure Red cKure Red @ckured · 2.79K subscribers
Post #368 1.8K
Whatsapp Spoofing impersonate of reply message

All official WhatsApp clients, upon receiving a "Message Reply" payload (QuotedMessage), do not validate whether the "ContextInfo" of this "QuotedMessage" is valid/exists ("StanzaId" and "Participant"). This allows a malicious actor to send in private chats or groups a "QuotedMessage" of a message that never existed on behalf of another person. This is highly critical and dangerous.

https://github.com/lichti/whats-spoofing

PoC: https://youtu.be/_WL6hpAvNh8
Open in Telegram All posts from @ckured
More from @ckured
  1. Oct 13, 2026The rate put bell in cat's neck. Predator is spyware sold to governments, and one of the w…
  2. Oct 13, 2026Motion tracking 📡 via WiFi 📲 https://github.com/andrisgauracs/wifi-sensing-kit/
  3. Oct 11, 2026cKure Red pinned «🖥 REA: Reverse Engineer Anything One MCP for reverse engineering across…
  4. Oct 11, 2026🖥 REA: Reverse Engineer Anything One MCP for reverse engineering across binaries, applica…
  5. Oct 3, 2026Update: Archivegenocide has now crossed 200,000 videos & images, which is almost triple wh…
  6. Sep 29, 2026📱 Telegram OSINT tactics
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →