Gregory's Serverexperimenting with binary patching is going well, thanks for asking.
 10 comments
@grishka Heh, i had no idea. I was just trying to get a peek at the Threads API, which turned into me trying to bypass SSL pinning, then it devolved into a whole...thing. I'll give the Android app a whack.  sam henri gold, you may also want to focus on enabling the internal developer settings. I'm not sure whether this disables the pinning but you can change the API host in them  i’m willing to flip every single bit back and forth until it does the thing i want. we can do this all day. @samhenrigold depending on how many bits you gotta flip I suspect you could do it for more than all day |
FYI if you want to hack on Instagram's internal APIs, the Android app is much easier to get at. It uses something called "proxygen" for the HTTP client. It's written in C++, which means JNI bindings, which means that part is necessarily excluded from obfuscation. You can hook your own code into it quite easily. I did that years ago to strip ads from API responses before handing them off to the rest of the app.