This Instagram "bug" is not really a bug but it's more a bad design by Instagram. Most platforms for logout use POST request, however Instagram uses the regular GET request to reset the session availability state. Don't get me wrong, it's not important to have it like that, however it opens a lot of room for people to ruin other's experience on Instagram by giving them a link which causes a logout.
If you are wondering, yes this will work also on Android and IOS devices. Doesn't matter if the user is using an app or not, they will still be logged out of their account once they open a link!
To get this "troll" link, watch the video until the end.
Also this link will be only available for 3 months so I don't cause too much havoc on Instagram.
I did report this to Instagram and mention that it's a "bad practice" and not generally a big impact CSRF, but my report was promptly closed.
I will soon also publish a way to troll Guilded users with a more sophisticated CSRF exploit so make sure you subscribe so you don't miss that out.
/ deadoverflow
/ deadoverflow
https://github.com/deadoverflow-git
/ discord