Bypass Instagram SSL Pinning on Android (ARM and x86
) Version 95.0.0.21.124
-
Instagram APK (ARM - x86)
Download only from this links, not Google Play or somewhere else -
a rooted Android device (Physical or virtual)
Genymotion Android 8+ suggested.
Genymotion virtual devices is rooted by default. -
ADB (Download)
Genymotion will install ADB automatically and you can find it on<Genymotion Installation path>/tools
-
Latest version of JDK (Download)
-
Burp Suite (*.jar version) (Download)
-
Install Genymotion, your virtual device and start it.
-
Download and install Instagram apk on your device.
-
Run Instagram and close it.
It's important to run Instagram app once before start patching! -
Download the patched file (ARM - x86) and push it to the device:
adb push libliger.so /data/data/com.instagram.android/lib-zstd/libliger.so
-
Run Burp Suite with
/<JDK Installation path>/bin/java -jar burpsuite_community.jar
and setting up proxy on your Android device.
You should install Burp Suite certificate on your Android device -
That's it! Now open the Instagram app on your device and intercept the requests in Burp Suite !
6ad7f81743171130b0202c7cdf1015ab40ed7fe438b63418e52b0e0b06139ecb
Note: Version 72.0.0.21.98 is the latest version you can use in non-root method, because in the newer versions libliger.so has been created after first app launch.
-
Run Burp Suite with
/<JDK Installation path>/bin/java -jar burpsuite_community.jar
and setting up proxy on your Android device.
You should install Burp Suite certificate on your Android device -
That's it! Now open the Instagram app on your device and intercept the requests in Burp Suite !
19ce5f445dbfd9d29c59dc2a78c616a7fc090a8e018b9267bc4240a30244c53b
If you want to show your appreciation, you can donate via PayPal.
Bitcoin: 1GhTaq5HqEj4xpP42drPxT4FNzxp8zUTfK
Iranian users can donate via IDPay.
Thanks.