Reverse-Engineering Instagram

app.rb

require 'openssl'
require 'base64'
require 'json'
require 'httpclient'

http = HTTPClient.new(:agent_name => useragent)
key = "" #The Private key
login_info = {:guid => "00000000-0000-0000-0000-000000000000",
                  :password => "PASSWORD", 
                  :username => "USERNAME", 
                  :device_id => "android-0000000000000000",
                  :_csrftoken => "missing"
                  }.to_json
signed_body = "#{Digest::HMAC.hexdigest(login_info, key, Digest::SHA256)}.#{login_info}"
post_data = {:signed_body => signed_body, :ig_sig_key_version => 4}
result = http.post("https://instagram.com/api/v1/accounts/login/", post_data, "Content-Type" => "application/json")
p result.body

logging_function.smali

const-string v5, "LOGGING"
invoke-static {v5, v0}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I

Key for Instagram 9.6.0:
19054fe6bacb4e68bb243d12a6879941be86aeb672b0a7f79f1db8573957035d

and this worked for me to get the correct hash for following users, in bash:
JSON={"_csrftoken":"xxx","user_id":"xxx","_uid":"xxx","_uuid":"xxx"}
Put in whatever values are yours, from sniffing the API

alias urlencode='python -c "import sys, urllib as ul; \
    print ul.quote_plus(sys.argv[1])"'

SIGNED_BODY=$(echo -n $JSON | openssl dgst -sha256 -hmac $KEY).$(urlencode $JSON)"&ig_sig_key_version=4"

Was anyone able to extract key from 10.0.1 ?

Never mind just did it my self

@glazkoman can you post it? Also, do you have a working example to post images?

@Maarius Did you get it?

Anyone got the key for instagram 10.x ? Thanks in advance

Anyone have the key?

Anyone found key for 10.9 or later? If anyone has, Please give me i need it.

This is what Instagram-API by mgp25 used (it works):
0443b39a54b05f064a4917a3d1da4d6524a3fb0878eacabf1424515051674daa

not working anymore , does anyone still working with him this method ?