Fixed Instagram false negative

[frogtheastronaut]

By removing the use of imginn.com, this pull request successfully removes the false negative of Instagram.

What I changed

Instead of using imginn.com as the probing URL for Instagram, i removed it so Sherlock should scan the instagram.com. Note that I ran this without an Instagram account, showing that most, if not all profiles are visible without the use of imginn.com. This is a fix to the false negative.

Proof it works.

This is the result before the change. I've cut it down to only show the section missing Instagram.

python3 -m sherlock_project.sherlock -j sherlock_project/resources/data.json nasa
[*] Checking username nasa on:

...
[+] HudsonRock: https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-username?username=nasa
[+] Hugging Face: https://huggingface.co/nasa
[+] IFTTT: https://www.ifttt.com/p/nasa
[+] Imgur: https://imgur.com/user/nasa
[+] Instructables: https://www.instructables.com/member/nasa
[+] Issuu: https://issuu.com/nasa
[+] Itch.io: https://nasa.itch.io/
[+] Itemfix: https://www.itemfix.com/c/nasa
[+] Kick: https://kick.com/nasa
[+] Kongregate: https://www.kongregate.com/accounts/nasa
[+] Laracast: https://laracasts.com/@nasa
[+] Launchpad: https://launchpad.net/~nasa
[+] Letterboxd: https://letterboxd.com/nasa
[+] LibraryThing: https://www.librarything.com/profile/nasa
[+] Linktree: https://linktr.ee/nasa
[+] LiveJournal: https://nasa.livejournal.com
[+] MMORPG Forum: https://forums.mmorpg.com/profile/nasa
[+] Medium: https://medium.com/@nasa
[+] Memrise: https://www.memrise.com/user/nasa/
[+] Minecraft: https://api.mojang.com/users/profiles/minecraft/nasa
[+] MixCloud: https://www.mixcloud.com/nasa/
...

This is the result after the change

python3 -m sherlock_project.sherlock -j sherlock_project/resources/data.json nasa
[*] Checking username nasa on:

...
[+] Houzz: https://houzz.com/user/nasa
[+] HubPages: https://hubpages.com/@nasa
[+] HudsonRock: https://cavalier.hudsonrock.com/api/json/v2/osint-tools/search-by-username?username=nasa
[+] Hugging Face: https://huggingface.co/nasa
[+] IFTTT: https://www.ifttt.com/p/nasa
[+] Imgur: https://imgur.com/user/nasa
[+] Instagram: https://instagram.com/nasa
[+] Instructables: https://www.instructables.com/member/nasa
[+] Issuu: https://issuu.com/nasa
[+] Itch.io: https://nasa.itch.io/
[+] Itemfix: https://www.itemfix.com/c/nasa
[+] Kick: https://kick.com/nasa
[+] Kongregate: https://www.kongregate.com/accounts/nasa
[+] Laracast: https://laracasts.com/@nasa
...

As you can see, the change has successfully allowed the detection of NASA's instagram account.

[github-actions]

Automatic validation of changes

Target	F+ Check	F- Check
Instagram	❌   Fail	✔️   Pass

---

Failures were detected on at least one updated target. Commits containing accuracy failures will often not be merged (unless a rationale is provided, such as false negatives due to regional differences).

[frogtheastronaut]

This pull request is as part of efforts in the Hacktoberfest program. Also, the checks may be wrong as it is using the wrong data.json? Or maybe it's because this change cannot detect private accounts. My proposed solution would be to implement an Instagram (public) and an Instragram (private) through imginn.com. This way, users can know if the Instagram account is public, or is private and whether they should use Instagram or Imginn to view the target's profile page.

[akh7177]

This pull request is as part of efforts in the Hacktoberfest program. Also, the checks may be wrong as it is using the wrong data.json? Or maybe it's because this change cannot detect private accounts. My proposed solution would be to implement an Instagram (public) and an Instragram (private) through imginn.com. This way, users can know if the Instagram account is public, or is private and whether they should use Instagram or Imginn to view the target's profile page.

The tests are done on modified data.json itself.

Also, when i try to implement your changes locally, I seem to not get any output and all upon checking for a username on Instagram. Is it region specific too?

[frogtheastronaut]

Yeah, I think Instagram is region-specific. I think that's causing the problems

[frogtheastronaut]

I think a solution would be to use Error messages instead of status codes. That way, it can detect both public and private accounts in all regions

[akh7177]

I think a solution would be to use Error messages instead of status codes. That way, it can detect both public and private accounts in all regions

Instagram currently uses layered WAF and checking whether a username is valid requires Instagram Graph API, which is a pain in itself. Adding Instagram I feel won't be straight forward. However, if you are interested in it. Do go through this article. There seems to be a workaround to directly query Instagram Public profiles.