OSINT for Instagram

Author: NextKool

.dockerignore

@@ -0,0 +1,11 @@
+.github
+.img
+doc
+output
+.dockerignore
+.gitignore
+Docker-compose.yml
+Dockerfile
+LICENSE
+Makefile
+README.md

.github/workflows/lint_python.yml

@@ -0,0 +1,20 @@
+name: lint_python
+on: [pull_request, push]
+jobs:
+  lint_python:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-python@v2
+      - run: pip install bandit black codespell flake8 isort mypy pytest pyupgrade safety
+      - run: bandit -r . || true
+      - run: black --check . || true
+      - run: codespell --ignore-words-list="followings" --quiet-level=2
+      - run: flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
+      - run: isort --check-only --profile black . || true
+      - run: pip install -r requirements.txt
+      - run: mypy --ignore-missing-imports .
+      - run: pytest . || true
+      - run: pytest --doctest-modules . || true
+      - run: shopt -s globstar && pyupgrade --py36-plus **/*.py || true
+      - run: safety check

.gitignore

@@ -0,0 +1,7 @@
+config/
+__pycache__/
+output/
+*.pyc
+*.json
+venv/
+credentials.ini

.img/carbon.png

@@ -0,0 +1,26 @@
+FROM python:3.9.2-alpine3.13 as build
+WORKDIR /wheels
+RUN apk add --no-cache \
+    ncurses-dev \
+    build-base
+COPY docker_reqs.txt /opt/osintgram/requirements.txt
+RUN pip3 wheel -r /opt/osintgram/requirements.txt
+
+
+FROM python:3.9.2-alpine3.13
+WORKDIR /home/osintgram
+RUN adduser -D osintgram
+
+COPY --from=build /wheels /wheels
+COPY --chown=osintgram:osintgram requirements.txt /home/osintgram/
+RUN pip3 install -r requirements.txt -f /wheels \
+  && rm -rf /wheels \
+  && rm -rf /root/.cache/pip/* \
+  && rm requirements.txt
+
+COPY --chown=osintgram:osintgram src/ /home/osintgram/src
+COPY --chown=osintgram:osintgram main.py /home/osintgram/
+COPY --chown=osintgram:osintgram config/ /home/osintgram/config
+USER osintgram
+
+ENTRYPOINT ["python", "main.py"]

.img/carbon.svg

@@ -0,0 +1,40 @@
+SHELL := /bin/bash
+
+setup:
+
+	@echo -e "\e[34m####### Setup for Osintgram #######\e[0m"
+	@[ -d config ] || mkdir config || exit 1
+	@echo -n "{}" > config/settings.json
+	@read -p "Instagram Username: " uservar; \
+	read -sp "Instagram Password: " passvar; \
+	echo -en "[Credentials]\nusername = $$uservar\npassword = $$passvar"  > config/credentials.ini || exit 1
+	@echo ""
+	@echo -e "\e[32mSetup Successful - config/credentials.ini created\e[0m"
+
+run:
+
+	@echo -e "\e[34m######## Building and Running Osintgram with Docker-compose ########\e[0m"
+	@[ -d config ] || { echo -e "\e[31mConfig folder not found! Please run 'make setup' before running this command.\e[0m"; exit 1; }
+	@echo -e "\e[34m[#] Killing old docker processes\e[0m"
+	@docker-compose rm -fs || exit 1
+	@echo -e "\e[34m[#] Building docker container\e[0m"
+	@docker-compose build || exit 1
+	@read -p "Target Username: " username; \
+	docker-compose run --rm osintgram $$username
+
+build-run-testing:
+
+	@echo -e "\e[34m######## Building and Running Osintgram with Docker-compose for Testing/Debugging ########\e[0m"
+	@[ -d config ] || { echo -e "\e[31mConfig folder not found! Please run 'make setup' before running this command.\e[0m"; exit 1; }
+	@echo -e "\e[34m[#] Killing old docker processes\e[0m"
+	@docker-compose rm -fs || exit 1
+	@echo -e "\e[34m[#] Building docker container\e[0m"
+	@docker-compose build || exit 1
+	@echo -e "\e[34m[#] Running docker container in detached mode\e[0m"
+	@docker-compose run --name osintgram-testing -d --rm --entrypoint "sleep infinity" osintgram || exit 1
+	@echo -e "\e[32m[#] osintgram-test container is now Running!\e[0m"
+
+cleanup-testing:
+	@echo -e "\e[34m######## Cleanup Build-run-testing Container ########\e[0m"
+	@docker-compose down
+	@echo -e "\e[32m[#] osintgram-test container has been removed\e[0m"

Dockerfile

@@ -0,0 +1,182 @@
+# Osintgram 🔎📸
+
+[![version-1.3](https://img.shields.io/badge/version-1.3-green)](https://github.com/Datalux/Osintgram/releases/tag/1.3)
+[![GPLv3](https://img.shields.io/badge/license-GPLv3-blue)](https://img.shields.io/badge/license-GPLv3-blue)
+[![Python3](https://img.shields.io/badge/language-Python3-red)](https://img.shields.io/badge/language-Python3-red)
+[![Telegram](https://img.shields.io/badge/Telegram-Channel-blue.svg)](https://t.me/osintgram)
+[![Docker](https://img.shields.io/badge/Docker-Supported-blue)](https://img.shields.io/badge/Docker-Supported-blue)
+
+Osintgram is a **OSINT** tool on Instagram to collect, analyze, and run reconnaissance.
+
+<p align="center">
+<img align="center" src=".img/carbon.png" width="900">
+</p>
+
+Disclaimer: **FOR EDUCATIONAL PURPOSE ONLY! The contributors do not assume any responsibility for the use of this tool.**
+
+Warning: It is advisable to **not** use your own/primary account when using this tool.
+
+## Tools and Commands 🧰
+
+Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname. You can get:
+
+```text
+- addrs           Get all registered addressed by target photos
+- captions        Get user's photos captions
+- comments        Get total comments of target's posts
+- followers       Get target followers
+- followings      Get users followed by target
+- fwersemail      Get email of target followers
+- fwingsemail     Get email of users followed by target
+- fwersnumber     Get phone number of target followers
+- fwingsnumber    Get phone number of users followed by target
+- hashtags        Get hashtags used by target
+- info            Get target info
+- likes           Get total likes of target's posts
+- mediatype       Get user's posts type (photo or video)
+- photodes        Get description of target's photos
+- photos          Download user's photos in output folder
+- propic          Download user's profile picture
+- stories         Download user's stories  
+- tagged          Get list of users tagged by target
+- wcommented      Get a list of user who commented target's photos
+- wtagged         Get a list of user who tagged target
+```
+
+You can find detailed commands usage [here](doc/COMMANDS.md).
+
+[**Latest version**](https://github.com/Datalux/Osintgram/releases/tag/1.3) |
+[Commands](doc/COMMANDS.md) |
+[CHANGELOG](doc/CHANGELOG.md)
+
+## FAQ
+1. **Can I access the contents of a private profile?** No, you cannot get information on private profiles. You can only get information from a public profile or a profile you follow. The tools that claim to be successful are scams!
+2. **What is and how I can bypass the `challenge_required` error?** The `challenge_required` error means that Instagram notice a suspicious behavior on your profile, so needs to check if you are a real person or a bot. To avoid this you should follow the suggested link and complete the required operation (insert a code, confirm email, etc)
+
+
+## Installation ⚙️
+
+1. Fork/Clone/Download this repo
+
+    `git clone https://github.com/Datalux/Osintgram.git`
+
+2. Navigate to the directory
+
+    `cd Osintgram`
+
+3. Create a virtual environment for this project
+
+    `python3 -m venv venv`
+
+4. Load the virtual environment
+   - On Windows Powershell: `.\venv\Scripts\activate.ps1`
+   - On Linux and Git Bash: `source venv/bin/activate`
+  
+5. Run `pip install -r requirements.txt`
+
+6. Open the `credentials.ini` file in the `config` folder and write your Instagram account username and password in the corresponding fields
+    
+    Alternatively, you can run the `make setup` command to populate this file for you.
+
+7. Run the main.py script in one of two ways
+
+    * As an interactive prompt `python3 main.py <target username>`
+    * Or execute your command straight away `python3 main.py <target username> --command <command>`
+
+## Docker Quick Start 🐳
+
+This section will explain how you can quickly use this image with `Docker` or `Docker-compose`.
+
+### Prerequisites
+
+Before you can use either `Docker` or `Docker-compose`, please ensure you do have the following prerequisites met.
+
+1. **Docker** installed - [link](https://docs.docker.com/get-docker/)
+2. **Docker-composed** installed (if using Docker-compose) - [link](https://docs.docker.com/compose/install/)
+3. **Credentials** configured - This can be done manually or by running the `make setup` command from the root of this repo
+
+**Important**: Your container will fail if you do not do step #3 and configure your credentials
+
+### Docker
+
+If docker is installed you can build an image and run this as a container.
+
+Build:
+
+```bash
+docker build -t osintgram .
+```
+
+Run:
+
+```bash
+docker run --rm -it -v "$PWD/output:/home/osintgram/output" osintgram <target>
+```
+
+- The `<target>` is the Instagram account you wish to use as your target for recon.
+- The required `-i` flag enables an interactive terminal to use commands within the container. [docs](https://docs.docker.com/engine/reference/commandline/run/#assign-name-and-allocate-pseudo-tty---name--it)
+- The required `-v` flag mounts a volume between your local filesystem and the container to save to the `./output/` folder. [docs](https://docs.docker.com/engine/reference/commandline/run/#mount-volume--v---read-only)
+- The optional `--rm` flag removes the container filesystem on completion to prevent cruft build-up. [docs](https://docs.docker.com/engine/reference/run/#clean-up---rm)
+- The optional `-t` flag allocates a pseudo-TTY which allows colored output. [docs](https://docs.docker.com/engine/reference/run/#foreground)
+
+### Using `docker-compose`
+
+You can use the `docker-compose.yml` file this single command:
+
+```bash
+docker-compose run osintgram <target>
+```
+
+Where `target` is the Instagram target for recon.
+
+Alternatively you may run `docker-compose` with the `Makefile`:
+
+`make run` - Builds and Runs with compose. Prompts for a `target` before running.
+
+### Makefile (easy mode)
+
+For ease of use with Docker-compose, a `Makefile` has been provided.
+
+Here is a sample work flow to spin up a container and run `osintgram` with just two commands!
+
+1. `make setup`   - Sets up your Instagram credentials
+2. `make run`     - Builds and Runs a osintgram container and prompts for a target
+
+Sample workflow for development:
+
+1. `make setup`          - Sets up your Instagram credentials
+2. `make build-run-testing`   - Builds an Runs a container without invoking the `main.py` script. Useful for an `it` Docker session for development
+3. `make cleanup-testing`     - Cleans up the testing container created from `build-run-testing`
+
+## Development version 💻
+
+To use the development version with the latest feature and fixes just switch to `development` branch using Git:
+
+`git checkout development`
+
+and update to last version using:
+
+`git pull origin development`
+
+
+## Updating ⬇️
+
+To update Osintgram with the stable release just pull the latest commit using Git.
+
+1. Make sure you are in the master branch running: `git checkout master`
+2. Download the latest version: `git pull origin master`
+
+
+## Contributing 💡
+
+You can propose a feature request opening an issue or a pull request.
+
+Here is a list of Osintgram's contributors:
+
+<a href="https://github.com/Datalux/Osintgram/graphs/contributors">
+  <img src="https://contributors-img.web.app/image?repo=Datalux/Osintgram" />
+</a>
+
+## External library 🔗
+
+[Instagram API](https://github.com/ping/instagram_private_api)