[Journey] Building a private mass dm network again

[hexagonal]

Hey man. Read this whole thread and I’m seriously impressed with your work. Well done bro.

Hey man. I’ve read this whole thread and I gotta say I’m impressed with your dedication. Your solutions and updates so far are sick, fair play bro. I’m trying to create almost the exact same thing by RE the private Instagram api. I’m wondering if you’d be willing to help me out a little?

I’m still at the research phase trying to figure out all the bits I need to fully understand before I begin coding. My approach is to first capture network traffic from an iPhone using proxy software on my Mac then reverse engineer the api calls and figuring out what they do. Gotta get around ssl pinning for this and understand QUIC and http3 a bit better. Any suggestions on proxy software to avoid ssl pinning? Have you managed to do it without jailbreaking? I can JB if necessary but don’t want insta to know I’m using a jail broken phone.

Also do I need to know much about encryption method and how to decrypt the headers etc?

I have proxies and aged accounts sorted for now so shouldn’t need any advice on that part.

As for coding the bot do you suggest c++ and then running the bot on an AWS ec2 instance? I’d love to use python instead of c++ but can do whatever works best. Don’t have too much experience in AWS as of right now but need to get into it anyway.

Any advice would be greatly appreciated and I wish you luck in the rest of your journey! Thanks man

- Here's a tutorial to intercept the requests without a real device and having to worry about JB https://www.alexschnabl.com/blog/ar...to-reverse-engineer-the-instagram-private-api

- No, only have to do a base64 decode in the auth header to get session id, you should not worry about real meaning of headers

- I don't see any advantage of using C++ over python as you'll be only making HTTP requests if you want to do something fancy then you are in the wrong path first focus on making your accounts bulletproof. I use EC2 because I like the pricing and the control over it but you can buy any basic linux VPS

Here are some tips from this journey
- Fall in love with the process -> This is a horrible journey if you don't love it, some days you'll go to bed thinking that your bot is undetectable and the next day you wake up with all your accounts challenged. What was that? The proxies? The account? Your bot? It's an endless fight
- Test with small batch accounts -> I've tested 20 sellers or so, start with a small order if 10 accounts last to you a month then invest more
- Try different combinations -> Accounts, proxies, bot logic, etc everything matters here just test multiple times

Happy to talk if you want to, like to see people building bots as it's a fun journey

How long did it take you to switch everything from Puppeteer to requests?

Any tips on how to make it look like a real device?

Hours, removed everything related to puppeteer and moved the actions to requests, not complex or hard if you already know which are the requests

Intercept the traffic from the app and understand each HTTP request if you hit the nail then instagram won't have any way to detect your bot

you should make something like this but for linkedin, that's where the true money is/

Probably in the future Instagram has my 100% right now as I'm already deep down on it.

 

[rampzeus]

- Here's a tutorial to intercept the requests without a real device and having to worry about JB https://www.alexschnabl.com/blog/ar...to-reverse-engineer-the-instagram-private-api

- No, only have to do a base64 decode in the auth header to get session id, you should not worry about real meaning of headers

- I don't see any advantage of using C++ over python as you'll be only making HTTP requests if you want to do something fancy then you are in the wrong path first focus on making your accounts bulletproof. I use EC2 because I like the pricing and the control over it but you can buy any basic linux VPS

Here are some tips from this journey
- Fall in love with the process -> This is a horrible journey if you don't love it, some days you'll go to bed thinking that your bot is undetectable and the next day you wake up with all your accounts challenged. What was that? The proxies? The account? Your bot? It's an endless fight
- Test with small batch accounts -> I've tested 20 sellers or so, start with a small order if 10 accounts last to you a month then invest more
- Try different combinations -> Accounts, proxies, bot logic, etc everything matters here just test multiple times

Happy to talk if you want to, like to see people building bots as it's a fun journey



Hours, removed everything related to puppeteer and moved the actions to requests, not complex or hard if you already know which are the requests

Intercept the traffic from the app and understand each HTTP request if you hit the nail then instagram won't have any way to detect your bot



Probably in the future Instagram has my 100% right now as I'm already deep down on it.

I am trying the link you posted but I cannot even rebuild the APK without running into errors. Did you use a specific version of the app or what?

 

[hexagonal]

Monday Update

Bot is working great found a thing with my proxies so going to check other sellers in the market.
Also found the way to send comments/DMS without accounts being ghosted.

Really excited about what comes next for the private network going to run a few AI accounts and make great marketing.
Feels great to move from all the coding to the marketing part will take this as a break to relax and unwind.

Will celebrate the next month this huge milestone, now there's work to be done.

Money and life

I could have make more money during all of this working for a tech company there's ton of offers, but then my soul would be drained and I would be another rat in the race just want to have a coffee in the morning go to the gym and visit a new place every month no need to drain my soul to achieve that.

I am trying the link you posted but I cannot even rebuild the APK without running into errors. Did you use a specific version of the app or what?

I don't remember using specific app version sent you a GH repo with some instructions on how I made it work

 

[RosaWebb]

Good Luck On your Journey Brother.

 

[hexagonal]

Update
After some ideas decided to use a different approach for the bot doing M/C which works better than mass DMS, here are results for one week of work gained 200 followers in an account with 1k.

Will follow this approach as it looks more consistent and cheaper than mass DMS.

 

[Alex Arn]

Interesting, wishing you the best on this journey.

 

[Elizabeth Alice]

Very interesting article. Wishing you continued growth and success.

 

[hexagonal]

Update on M/C

Great news!
Follow are push notifications + managed to understand the API endpoints to update bio/upload photo
Still pending
- Follow
- DM ( Already have the endpoint just have to tweak it )
- Like

Best wishes on your journey.

Very interesting article. Wishing you continued growth and success.

Interesting, wishing you the best on this journey.

Thanks!

 

[hexagonal]

Update
Added
- Follow
- Like last post to follow targets
- Improvements to bot and know it's handled using a JSON

 

[hexagonal]

This is the end of this long journey!

Managed to make M/C accounts last and I think they won't be banned.
Really nothing much more to add will keep testing and see if it's worth to do M/C or mass DMs vs creating HQ content.

Thanks everyone!

 

[Eithan Roy]

Wish You The Best On This Journey,


Good luck for the your journey,..

 

[YolandaTurner]

All The Best To This Journey.
Keep Updating.

 

[illuminati6xD]

I was reading through this for the past few days as a lurker and this guy is the reason I joined this forum. I'm following this for sure and about to start this method for myself.

 

[BreeLik]

Following this thread bro, great work!
I am kind of new to api reverse engineering and I was wondering where I can find resources for intermediate/advanced. I am moving from selenium based automation to this and would love to know the resources. Thanks!

 

[hexagonal]

Following this thread bro, great work!
I am kind of new to api reverse engineering and I was wondering where I can find resources for intermediate/advanced. I am moving from selenium based automation to this and would love to know the resources. Thanks!

Hello this might help you
https://github.com/user1342/Awesome-Android-Reverse-Engineering

 

[Ignatius O]

I can't dm you.
I bought Mac m1. The meaning of Headless Is without a monitor.
Tò connect tò It you Need "HDMI" plug attached into the PC and a client TO REMOTE CONTROL THE HOST(MAC)

Can you share a link to this mac m1?

 

[hexagonal]

Can you share a link to this mac m1?

Probably a mac mini m1

 

[Ignatius O]

Probably a mac mini m1
View attachment 346142

Ok thanks

 

[zananova]

bro contact me i do the same things as you, i can prolly help you reduce the cost drastically

 

[social_newbie]

Thanks op for sharing such great Journey, it's the 2nd time I read the whole post, I may come back agin later on

i have 3 questions
1. For mobile proxy, how many accunts do you running per proxy?

2. May I ask how do you send DM? just find the target user then send dm? or follow them first then send?

3. For DM , how do you compose the content? fixed txt or use some AI?

Thanks again