Simple tool to check weak /api/enpoints of instagram affected by block feature This code was the part of my proof of concept reported to instagram security team by which any blocked user can call api with his access_token to see victim comments,likes,photos, etc now it has been patched by team .
1.0
It consist of 2 scripts
- A php script to fetch userid
- A python script to fetch the likes,photos,comments
$ pip install python-instagram###2.)You will need the access_token of your own account + client_secret
-
to generatefollow https://www.instagram.com/developer/authentication/
-
access_token = "1931492888.1677ed0.8f098298b22a4ad3ae82709dfcb712c0"
-
client_secret = "55f1524c1af34108ad2b03bf83d6bdc6"
$ python starscan.py
$Enter user id >>>509823
fetching...
- InstagramAPI
https://www.youtube.com/watch?v=0ZUeQ_fG_BA
https://vishwarajbhattrai.wordpress.com/2016/07/13/hacking-instagram-apis/