Giter VIP home page Giter VIP logo

tlsecret's Introduction

TLSecret

TLSecret allows you to grant access to your Telegram account in other Telegram Tools apps, which may require logging in two users (TLMerger and TLImporter as of now). This is known as "Secret Mode" in all of my apps. Compatible Telegram Tools can be indetified by the Compatible with Secret Mode label, like the one used below the logo in this page.

How to use?

When using TLSecret, we will be using two different apps at the same time. Some concepts:

  • The listener app: The Telegram Tools' app where you want to be logged in (TLImporter, TLMerger, TLRevert...)
  • TLSecret, which will help to grant access to a Telegram account in any of the listener apps.

The instructions below considers that you will be the person using TLSecret, while your partner will be using any of the listener apps. The listener app can be running in a remote computer, no physical presence is required to authenticate you succesfully!

Preparation

Before you can do anything with TLSecret, your partner must prepare the listener app:

  • All listeners app will prompt the user, at any point, whether using the "Secret Mode" or not. Your partner should agree to use it
  • Your partner's chat list will be displayed in the window. He must choose you from the list.
  • The app will display Waiting for a response....

Once the app of your partner is in a Waiting for a response... state, you are can continue.

Granting access

Once your partner's listener app state is Waiting for a response..., open TLSecret and perform these simple steps:

  • Log in to Telegram as you would normally do: Input your phone number, verification code and password.
  • (TLSecret will encrypt your Telegram session at this point, so it might take a few seconds to continue)
  • Your chat list will be printed inside the window. Choose your partner from the list.
  • Wait until the authentication is done succesfully in your partner's computer. You will be inmmediately informed

You are done! At this point, you will have full control over your authorization in Telegram. Just by pressing ENTER, you will be able to revoke the authorization and discard that session. If you have closed the app after authenticating, you will be able to revoke the session by opening it again and pressing ENTER.

You can also control the access to your account using Telegram Desktop or the Telegram app in your phone, in Settings > Privacy and Security > Active Sessions

What if something else goes wrong?

As stated in the app's disclaimer, there is no perfect encryption and the 100% security doesn't exist. In fact, there are many security flaws in the app: The password for decrypting the file could be easily obtained from the binaries, after decrypting the session file, it could be read before it's processed by the listener app, the Telegram's AuthKey is stored in the RAM's of your partner's computer, which can also be read if he has the proper knowledge. Although I consider that TLSecret is really safe to use and has proper security, you need to know that nothing is perfect and I don't suggest you to use this app with completely unknown people, but at least, with some people you trust a little. Remember that you also will be able to revoke any session if everything fails, using other Telegram apps: Go to Settings - Privacy and Security - Active Sessions and revoke any session you don't know.

Download

You can always grab the latest version heading over the releases tab. I built binaries for Windows (64 bits), Linux amd64 and Linux armhf

  • On Windows: Simply double click on the .exe file
  • On Linux: Download the binary, cd to the folder where the download is located and do chmod +x TLSecret-xxx && ./TLSecret-xxx

If you're running other systems (like MacOS), you will need to build the files from source.

Build from sources

Make sure that you replace the api_id and api_hash variables in the TLSecret.py file. Read instructions here for getting your own from Telegram.

You can't use Secret Mode if one of the sides is still using the binaries: I'm the only holder of the encryption key, so it's more difficult for malicious people to compromise them. If you want to use the Secret Mode, you must build both the listener app and TLSecret from sources using the same password for it to work. You can specify the password used for encryption/decryption in the password variable.

Credits

Huge thanks to Telethon, and his great creator, Lonami, who always was up to answering questions and helping in development. I'm so grateful for his patience :). Also, huge thanks to pyAESCrypt, which simplified a lot the process of encrypting/decrypting the session files. Thanks to the PyInstaller team for their great tool, which I used to build the binaries.

Also, huge acknowledgements to Telegram for making such a great messenger!

Give always credits to all the original authors and owners when using some parts of their hard work in your own projects

tlsecret's People

Contributors

ferferga avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar

Forkers

ivanrome bellyfat

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.