# kernelpanic0x11/instagram-api-workbench

> A local Swagger UI and OpenAPI catalog reconstructing the HTTP surface of Instagram's Android app (version 451.0.0.53.80) via static DEX analysis. Lets researchers browse and manually call recovered routes using their own session.

- Magnitude: 3.1 out of 10 — Early signal
- Stars: 101 total · +0 stars measured 2026-10-19, 00:06–01:31 UTC, ≈ 11 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Java · License: MIT · Created: 2026-10-17 · Last push: 2026-10-17
- GitHub: https://github.com/kernelpanic0x11/instagram-api-workbench · Page: https://gitnova.dev/en/r/kernelpanic0x11/instagram-api-workbench

## Useful for

- Run the local Swagger UI to browse recovered Instagram API routes
- Connect your own session cookie or bearer token and manually call a specific endpoint
- Cross-reference recovered methods and paths with the DEX static-analysis evidence files

## Why it’s here

- Star-counter measurements on 2026-10-19 (UTC), 00:06–01:31: 101 → 101 stars (+0). This is the change over that interval.
- Estimated end-of-day forecast: about +11 stars, using observed gains and the previous day.
- The repository is 2 days old and already has 101 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #185.
- About 13 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 27
- Issues and pull requests: 0
- Watchers: 3
- Average over the last week: 37 per day
- Usual pace: too little history (under two weeks)
- Stars in the last hour (measured): 0

## Stars per day, last 3 days (oldest → newest, today is partial)

2026-10-17 … 2026-10-19: 88, 13, 0

## Spotted in now

- Top new repositories this week: #185

## More in this category

1. **interplains/zero-breach** — 6.1 · Early signal · Security · Python · +29 stars measured 2026-10-19, 00:06–01:29 UTC, ≈ 192 by evening
   A local, read-only Python scanner that looks for traces of the AdFection / Candiru spyware campaign on a machine: browser history and cookies, caches, autostart entries, file hashes and the DNS resolver cache. No admin rights, no…
   Full card: https://gitnova.dev/en/r/interplains/zero-breach.md
2. **gichirimaku/wp2shell-PoC** — 5.7 · Early signal · Security · Python · +19 stars measured 2026-10-19, 00:05–01:29 UTC, ≈ 158 by evening
   Proof-of-concept exploit for the wp2shell vulnerability chain in WordPress Core (CVE-2026-63030 and CVE-2026-60137), leading from a pre-auth SQL injection to RCE. Intended for testing your own or authorized sites.
   Full card: https://gitnova.dev/en/r/gichirimaku/wp2shell-PoC.md
3. **sakidekin/CVE-2026-41940-PoC** — 5.6 · Early signal · Security · Python · +7 stars measured 2026-10-19, 00:05–01:29 UTC, ≈ 114 by evening
   PoC exploit for CVE-2026-41940, an authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access via CRLF injection into server-side sessions. The tool scans targets and performs post-exploitation…
   Full card: https://gitnova.dev/en/r/sakidekin/CVE-2026-41940-PoC.md
4. **valimised/ivxv** — 5.0 · Early signal · Security · Go · +1 star measured 2026-10-19, 00:05–01:29 UTC, ≈ 31 by evening
   Source code of the Estonian IVXV online voting system, published for public review. It is used in elections and development is supervised by the State Electoral Office of Estonia.
   Full card: https://gitnova.dev/en/r/valimised/ivxv.md
5. **bandwatchmanriddle/Clion** — 4.5 · Early signal · Security · +0 stars measured 2026-10-19, 00:06–01:29 UTC, ≈ 84 by evening
   The repository poses as a JetBrains CLion installer but actually instructs users to run a third-party PowerShell script from an external domain for a 'pre-activated' build. This is a typical malware distribution scheme, not a legitimate…
   Full card: https://gitnova.dev/en/r/bandwatchmanriddle/Clion.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-19 01:39 UTC, updated every 30 minutes.