topic WhatsApp and Minemeld in General Topics

WhatsApp and Minemeld

lvmh_onenetwork — Thu, 27 Dec 2018 12:45:09 GMT

Hello,

It seems that Facebook allows again customer to easily access network requirement for WhatsApp (https://developers.facebook.com/docs/whatsapp/guides/network-requirements/) such as Ports, Protocols and IP Addresses.

The IP Addresses are stored in a ZIP file behind an URL.

I'm not an expert nor a beginner to develop a miner to exploit this source, but I'm ready to make some tests.

Do we have someone from the community who wants to take the challenge to develop that?

In any case thanks a lot.
Regards

Re: WhatsApp and Minemeld

lmori — Sun, 13 Jan 2019 18:29:47 GMT

Hi @lvmh_onenetwork,

for sure that article is not really security focused (You can try to allow all of the IP addresses. However, it is best to just allow all outgoing traffic and connections from the above ports. :-))

PAN-OS does a good job at detecting whats-app application, do you think mining IP addresses would be useful anyway?

luigi

Re: WhatsApp and Minemeld

lvmh_onenetwork — Tue, 19 Nov 2019 12:37:43 GMT

Hello,

never late to respond on this topic 🙂

yeah, we are trying to use as much as possible the APP-ID but often (but very few) the application does not recognize the flow and I really have to avoid that.

Thank you for your answer.