{"id":28135884,"url":"https://github.com/kenxindev/unpack-ig-apk","last_synced_at":"2025-08-31T04:17:08.073Z","repository":{"id":285928926,"uuid":"959790093","full_name":"KenXinDev/Unpack-IG-APK","owner":"KenXinDev","description":"Unpacking and Packing Instagram APK","archived":false,"fork":false,"pushed_at":"2025-04-03T11:15:58.000Z","size":9,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-21T07:39:55.088Z","etag":null,"topics":["bypass-ssl","instagram","security-tools","ssl-pinning-bypass"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/KenXinDev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-04-03T11:05:11.000Z","updated_at":"2025-04-03T11:19:20.000Z","dependencies_parsed_at":"2025-04-03T12:35:05.650Z","dependency_job_id":null,"html_url":"https://github.com/KenXinDev/Unpack-IG-APK","commit_stats":null,"previous_names":["kenxindev/unpack-ig-apk"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/KenXinDev/Unpack-IG-APK","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KenXinDev%2FUnpack-IG-APK","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KenXinDev%2FUnpack-IG-APK/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KenXinDev%2FUnpack-IG-APK/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KenXinDev%2FUnpack-IG-APK/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/KenXinDev","download_url":"https://codeload.github.com/KenXinDev/Unpack-IG-APK/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KenXinDev%2FUnpack-IG-APK/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272937372,"owners_count":25018364,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-31T02:00:09.071Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bypass-ssl","instagram","security-tools","ssl-pinning-bypass"],"created_at":"2025-05-14T15:20:11.317Z","updated_at":"2025-08-31T04:17:08.031Z","avatar_url":"https://github.com/KenXinDev.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Instagram SSL Pinning Bypass Tool 🔒➡️🔓\n\n![APK Patching](https://img.shields.io/badge/APK-Patching-brightgreen) \n![Frida](https://img.shields.io/badge/Powered%20by-Frida-blue) \n![Python](https://img.shields.io/badge/Python-3.6%2B-yellow)\n\nAutomated tool to patch Instagram APK and bypass SSL pinning for security research and penetration testing.\n\n## 🚀 Features\n\n- ⚡ **One-click patching** of Instagram APK\n- 🔧 **Automatic injection** of Frida Gadget\n- 🛡️ **Multi-layer SSL bypass**:\n  - OkHttp Certificate Pinner\n  - X509TrustManager\n  - Android Network Security Config\n  - Native SSL verification\n- 📱 **Multi-architecture support**:\n  - arm64-v8a\n  - armeabi-v7a  \n  - x86\n  - x86_64\n- 🔐 **Auto-signing** with debug keystore\n- ⚙️ **Customizable** with advanced options\n\n## 📦 Prerequisites\n\n| Requirement | Installation Guide |\n|-------------|--------------------|\n| Python 3.6+ | [python.org](https://www.python.org/downloads/) |\n| Java JDK | [Oracle JDK](https://www.oracle.com/java/technologies/javase-downloads.html) |\n| Android SDK | [Developer Android](https://developer.android.com/studio) |\n| Apktool | [Apktool](https://ibotpeaches.github.io/Apktool/) |\n\n```bash\n# Install required Python packages\npip install requests\n```\n\n## 🛠️ Installation\n\n1. Clone the repository:\n```bash\ngit clone https://github.com/KenXinDev/Unpack-IG-APK.git\ncd Unpack-IG-APK\n```\n\n2. Make the script executable:\n```bash\nchmod +x run.py\n```\n\n## 💻 Usage\n\n### Basic Usage\n```bash\npython run.py -i original.apk -o patched.apk\n```\n\n### Advanced Options\n```bash\npython run.py \\\n  -i original.apk \\\n  -o custom_name.apk \\\n  --keystore my.keystore \\\n  --keyalias myalias \\\n  --storepass complexpassword \\\n  --frida-version 16.1.11\n```\n\n### 🔧 Command Line Arguments\n\n| Argument | Description | Default |\n|----------|-------------|---------|\n| `-i`, `--input` | Input APK path | **Required** |\n| `-o`, `--output` | Output APK path | `instagram_patched.apk` |\n| `--keystore` | Custom keystore path | Auto-generated |\n| `--keyalias` | Keystore alias | `androiddebugkey` |\n| `--storepass` | Keystore password | `android` |\n| `--frida-version` | Frida gadget version | Latest release |\n\n## 🔍 How It Works\n\n```mermaid\ngraph TD\n    A[Input APK] --\u003e B{Unpack with Apktool}\n    B --\u003e C[Find Injection Point]\n    C --\u003e D[Inject Frida Loader]\n    D --\u003e E[Download Frida Gadget]\n    E --\u003e F[Add Bypass Scripts]\n    F --\u003e G[Repack APK]\n    G --\u003e H[Sign \u0026 Zipalign]\n    H --\u003e I[Output APK]\n```\n\n## 🛡️ Included Bypass Techniques\n\n```javascript\n// Java Layer Bypasses\nJava.perform(function() {\n    // OkHttp Bypass\n    var CertificatePinner = Java.use(\"okhttp3.CertificatePinner\");\n    CertificatePinner.check.overload().implementation = function() {};\n    \n    // TrustManager Bypass\n    var X509TrustManager = Java.use(\"javax.net.ssl.X509TrustManager\");\n    X509TrustManager.checkServerTrusted.implementation = function() {};\n});\n\n// Native Layer Bypass\nInterceptor.attach(Module.findExportByName(\"libssl.so\", \"SSL_CTX_set_verify\"), {\n    onEnter: function(args) { args[2] = ptr(0); }\n});\n```\n\n## ⚠️ Important Notes\n\n- 🔞 **For educational and research purposes only**\n- 📜 Use only on APKs you legally own or have permission to modify\n- ⚖️ Comply with all applicable laws and regulations\n- 🛑 Not for malicious use\n\n## 🐛 Troubleshooting\n\n| Issue | Solution |\n|-------|----------|\n| Missing tools | Verify all prerequisites are installed and in PATH |\n| Frida download fails | Check internet connection or specify version |\n| Injection fails | Try different Instagram version |\n| Keystore issues | Provide custom keystore with `--keystore` |\n\n## 📜 License\n\nMIT License - Use responsibly and ethically.\n\n---\n**Disclaimer**: This tool is provided for **legal security research** only. The developers assume no liability for any misuse.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkenxindev%2Funpack-ig-apk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkenxindev%2Funpack-ig-apk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkenxindev%2Funpack-ig-apk/lists"}