search

Eltion / Instagram-SSL-Pinning-Bypass

Bypass Instagram SSL pinning on Android devices.
GNU General Public License v3.0
432 stars 88 forks source link

help #73

Open sulycat opened 5 days ago

sulycat commented 5 days ago

can you please help me i dont get all the traffic or apis like i dont get the /v1/login i get the bloks one instead and a lot of them and also and i also dont get this api when i change the username to get the traffic of it https://i.instagram.com/api/v1/bloks/apps/com.bloks.www.fxim.settings.username.change.async/

can someone help or atleast give me this one ? any help appreciated thanks using memu , burpsuite

erenctnky commented 5 days ago

That's because IG has changed it's requests response body structure and some endpoints after version 274.

@sulycat

sulycat commented 5 days ago

how can i get this one then "https://i.instagram.com/api/v1/bloks/apps/com.bloks.www.fxim.settings.username.change.async/" every tool still works with it i guess but how do they get it ? @erenctnky

erenctnky commented 5 days ago

how can i get this one then "https://i.instagram.com/api/v1/bloks/apps/com.bloks.www.fxim.settings.username.change.async/" every tool still works with it i guess but how do they get it ? @erenctnky

It's called "Instagram Bloks Layout". You can peel it using RegEx and you will see the bodies are already json. I've seen a repo to parse bloks layout, you can also search for it.

sulycat commented 5 days ago

isnt it like filtering to see which one contains bloks? on it or api or the specified word ? and send it to the repeater to see? or i dont understand sorry for bothering you @erenctnky

any help appreciated if anyone sees this