Eltion / Instagram-SSL-Pinning-Bypass

Bypass Instagram SSL pinning on Android devices.
GNU General Public License v3.0
433 stars 88 forks source link

[BUG] Can't capture request in Patched APK after closing the app #27

Closed 2shiraz closed 1 year ago

2shiraz commented 1 year ago

Describe the bug
Hi, I am facing a bug with the Pre Patched apk. When I launch the app for the first time with Burp capturing, Everything seems fine, But when I close the app (after login) and relaunch, the request capturing just stops. Although the app works fine but nothing is captured anymore. Restarting the emulator doesn't help but I'm able to recapture requests by clearing data or reinstalling the app.

Method
Patched APK

App info

Device info

Proxy tool brup: v2022.12.6

Eltion commented 1 year ago

@2shiraz this is because the instagram is using HTTP/3. There is already an issue for this here https://github.com/Eltion/Instagram-SSL-Pinning-Bypass/issues/19

A temporary solution for this is to delete the config file that instagram creates, I've added a function for this but it's commented for now, to enable it just uncomment this line and patch the apk:

- //disableHTTP3();
+ disableHTTP3();
Eltion commented 1 year ago

I just patched a version you can test which should disable HTTP/3 https://send.vis.ee/download/dbfb59f4eadf5b46/#vTI2ZmIXZcQqBB8w4JtfgQ

Taz03 commented 1 year ago

@Eltion the link expired can u make a new one?

2shiraz commented 1 year ago

@Eltion the link expired can u make a new one?

Here https://www.mediafire.com/file/rlwlltmj7lyimu1/instagram-v265.0.0.19.301-x86_64+(1).apk/file

Taz03 commented 1 year ago

@2shiraz thanks :heart: it is working now

abdullahsaeed98 commented 1 year ago

https://send.vis.ee/download/dbfb59f4eadf5b46/#vTI2ZmIXZcQqBB8w4JtfgQ

can you make a patch for most recent arm8v-64 version which bypasses http3 or add them in main github page ?