Bypass Instagram SSL Pinning on Android (ARM and x86
) Version 107.0.0.27.121
-
Latest version of JDK (Download)
-
Burp Suite v1.7.36 (*.jar version) (Download)
-
Instagram APK (ARM - x86) - For root method only
Download only from this links, not Google Play or somewhere else -
a rooted Android device (Physical or virtual) - For root method only
Genymotion Android 8+ recommended.
Genymotion virtual devices is x86 and rooted by default. -
ADB (Download) - For root method only
Genymotion will install ADB automatically and you can find it on<Genymotion Installation path>/tools
-
Download and install patched APK (ARM - x86). (ARM on physical device recommended!)
-
Run Burp Suite with
/<JDK Installation path>/bin/java -jar burpsuite_community.jar
and setting up proxy on your Android device.
You should install Burp Suite certificate on your Android device -
That's it! Now open the Instagram app on your device and intercept the requests in Burp Suite !
-
Install Genymotion or your virtual device and start it.
-
Download and install Instagram apk on your device.
-
Open Instagram app (wait a few seconds) and close it.
It's important to run Instagram app once, before start patching! -
Download the patched file (ARM - x86) and push it to the device:
adb push libliger.so /data/data/com.instagram.android/lib-zstd/libliger.so
-
Open Instagram app again (wait a few seconds) and close it.
-
Run Burp Suite with
/<JDK Installation path>/bin/java -jar burpsuite_community.jar
and setting up proxy on your Android device.
You must set the proxy in this step
You should install Burp Suite certificate on your Android device -
That's it! Now open the Instagram app and intercept the requests in Burp Suite !
c36436a942ea1dbb40d7f2d7d45280a620d991ce8c62fb4ce600f0a048c32c11
If you want to show your appreciation, you can donate via PayPal.
Bitcoin: 1GhTaq5HqEj4xpP42drPxT4FNzxp8zUTfK
Iranian users can donate via IDPay.
Thanks.