wxkey

Documentation

Overview

wxkey extracts WeChat 4.x WCDB master keys from the live WeChat process on macOS. Pure Go (purego + Mach VM syscalls). Passively scans WeChat's heap for the SQL literal `x'<hex>'` that WCDB constructs when forwarding keys to sqlite3_key_v2, then verifies each candidate via SQLCipher 4 page-1 HMAC.