Load up your android device.
Next click on your playstore app and search for “Termux” & install it.
Open Termux app and type: “pkg install git”.
To update available packages type: “pkg update”.
Lets install python by typing ” pkg install python”
We will need to download the tool we will be using for this bruteforce exercise. To download, on your terminal…type: “git clone https://github.com/avramit/instahack
Once the download is complete, type: “ls” to list the available folders/files in current directory
As you can see you have a folder call “instahack”, now make your way into that folder by typing “cd instahack”.
Type: “ls” to list the available files.
Ok we are nearly there. Next lets install an editor so we can edit the password file. To install nano, type : “pkg install nano” .
Ok lets stop for a second. Now allow me to explain a few things for the beginners. As the article said , this is a bruteforce method. So whats a bruteforce method? A bruteforce method is when the target credentials are ran against a list of possible passwords. The only thing about bruteforcing is that you are responsible for the strength of your own password list. Meaning the probability of cracking the password depends on the strength of the wordlist and the amount of possible words we put in. This will take time to build or you can use cupp.py to custom make a wordlist.
Fine so lets edit our password list. In instahack directory, type: ls.
As you can see there is a file named pass.txt. This is the file that you will need to place all the possible passwords in.
To edit the pass.txt, we will be using the nano editor that we just installed. Type: “nano pass.txt”.
Below you will see a small list of passwords that comes with it by default, you can now add as many words as possible for it to run against the target. You could use cupp.py to custom build password lists.
16)When you are done , press alt x, yes, enter. For those using samsung s8+ like myself, the alt button is replaced on ur phone as the volume down button. Press on to the volume down button and press x at the same time.
And now for the final installation, type : “pip install requests”.
We are ready!! Lets run the script, type: “python hackinsta.py” .
You will first be asked for your target username.
Next you will be given an option to use a proxy or not. I wont be using any for this tutorial
And lastly u can set the intervals between tries. I have set mine to 6.
Once you have it all keyed in, press enter.
As you can see upon enter, instahack starts running the pass.txt against the target username. If the password is incorrect it will show incorrect, otherwise as shown below, it will show the correct login credentials.
