[ igbf ]: Instagram Brute Forcer

Brute Force Instargam account logins w/ dictionary attack!

Disclaimer :warning:

• This project is only a proof-of-concept & build for educational purpose
• You should have explict permission for testing account security from the owner
• developer is not responsible for any illegal use, it is end user's responsibility

  “With great power comes great responsibility”

Usage :placard:

• Installation

  • Just clone and start using, no need of installing any requirements.
  • Internet connection is essential
  • To use proxy, a library (pip install beautifulsoup4) is required; The program installs it for you while running (if not present)
  • Also you can get the latest version from releases

git clone https://github.com/s41r4j/igbf
cd igbf

• Update
  • Goto the igbf directory and type git pull to update to latest version
  • Else download latest version of script from releases

• Help Menu

python3 igbf.py

usage: igbf.py [-h] [-u USERNAME] [-w WORDLIST PATH] [-t TIMEOUT] [-v] [-p] [-l PROXY_LIMIT] [-f PROXY FILE PATH]

(s41r4j:igbf)> Instagram Brute Forcer

optional arguments:
  -h, --help            show this help message and exit
  -u USERNAME, --username USERNAME
                        instagram username (*required)
  -w WORDLIST PATH, --wordlist WORDLIST PATH
                        password wordlist (*required)
  -t TIMEOUT, --timeout TIMEOUT
                        timeout between each request in secs (default: 2)
  -v, --verbose         verbose mode (displays failed logins and more)
  -p, --proxy           built-in ip rotating proxy (additinal library required)
  -l PROXY_LIMIT, --proxy-limit PROXY_LIMIT
                        limit the number of proxies to use (default: 300; max: 300; min: 1)
  -f PROXY FILE PATH, --proxy-file PROXY FILE PATH
                        use custom proxy file (`-p` & `-l` disabled)

• Example

python3 igbf.py -u USERNAME -w /PATH/TO/PASSWORD/WORDLIST -v

Wordlists :page_with_curl:

Those who are using linux/hacking machines (like kali/parrot os, which has pre-installed stuff), can find password wordlist at /usr/share/wordlists/ (mostly rockyou.txt, if it is rockyou.txt.gz - unzip with tar -xvzf rockyou.txt.gz)

• Download links for password wordlists (more @ Kaggle & Github):

  • praetorian-inc/Hob0Rules/wordlists
  • danielmiessler/SecLists/Passwords/Common-Credentials

• Generate custom wordlist (article):

  • Common User Passwords Profiler (CUPP)
  • Mentalist (graphical tool)

Note :bookmark_tabs:

- It only supports single username (currently
- If you're not using proxy, instagram blocks/bans your ip (temporarily, dw) after 7-8 attempts
- Now proxies work fine, but the only problem it is time consuming and slow
- Supports: Windows, Mac, Unix/Linux (Termux)

• If you have any quries/issues/errors, open an issue here
• All contributions are welcomed, do a pull request