Every Call Leaves a Trail - Extracting IP Addresses and Locations from WhatsApp Calls
In this blog, I’ll walk through how the STUN protocol and WebRTC can expose a caller’s real IP address during a WhatsApp call, and how I built a tool that captures STUN packets to extract and geolocate the other participant’s IP in real time. The idea for this came from reading Analyzing WhatsApp Calls by Schirrmacher, which breaks down the network-level behavior and low level workings of WhatsApp calls. That analysis made me want to build something that automates the entire process: from packet capture to IP extraction to geolocation, all in one tool. ...