Alternatives and similar repositories for ja4

Users that are interested in ja4 are comparing it to the libraries listed below

• salesforce / ja3
  JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
  ☆3,003Updated 5 months ago
• salesforce / jarm
  ☆1,261Updated 2 years ago
• VirusTotal / yara-x
  A rewrite of YARA in Rust.
  ☆886Updated this week
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆380Updated last year
• fooinha / nginx-ssl-ja3
  nginx module for SSL/TLS ja3 fingerprint.
  ☆213Updated 6 months ago
• kunai-project / kunai
  Threat-hunting tool for Linux
  ☆982Updated last month
• FoxIO-LLC / ja4-nginx-module
  Nginx module that calcuates fingerprints from the JA4+ suite
  ☆74Updated last month
• wi1dcard / fingerproxy
  Fingerproxy is an HTTPS reverse proxy. It creates JA3, JA4, Akamai HTTP2 fingerprints, and forwards to backend via HTTP request headers.
  ☆270Updated 4 months ago
• pagpeter / TrackMe
  ☆336Updated last week
• 0x4D31 / galah
  Galah: An LLM-powered web honeypot.
  ☆587Updated 2 months ago
• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆184Updated 4 months ago
• CUCyber / ja3transport
  Impersonating JA3 signatures
  ☆391Updated last year
• refraction-networking / utls
  Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
  ☆2,044Updated 2 months ago
• mandiant / GoReSym
  Go symbol recovery tool
  ☆824Updated last month
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆1,960Updated 3 months ago
• cloudflare / mitmengine
  A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
  ☆811Updated last year
• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆995Updated this week
• Nisitay / pyp0f
  p0f v3 with impersonation spoofing, written in Python - Accurately guess the OS of a packet with passive fingerprinting.
  ☆65Updated last year
• gospider007 / fp
  🚀obtain the client's ja3 fingerprint, http2 fingerprint, and ja4 fingerprint
  ☆101Updated last week
• zmap / zgrab2
  Fast Application Layer Scanner
  ☆1,968Updated last week
• PeterDaveHello / top-1m-domains
  🌐 List of free and downloadable top 1M domain list (alexa alternatives) 📊
  ☆241Updated last year
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆393Updated 4 years ago
• HumanSecurity / restringer
  A Javascript Deobfuscator
  ☆471Updated 2 weeks ago
• FoxIO-LLC / ja4tscan
  JA4TScan is an active TCP server fingerprinting tool.
  ☆88Updated last year
• MISP / misp-warninglists
  Warning lists to inform users of MISP about potential false-positives or other information in indicators
  ☆586Updated 2 weeks ago
• fox-it / dissect
  Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…
  ☆1,044Updated last week
• nitefood / asn
  ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Ne…
  ☆1,746Updated this week
• Danny-Dasilva / CycleTLS
  Spoof TLS/JA3 fingerprints in GO and Javascript
  ☆1,177Updated this week
• abrahamjuliot / web-fingerprinting
  web fingerprinting research
  ☆235Updated 2 years ago
• cisagov / vulnrichment
  A repo to conduct vulnerability enrichment.
  ☆685Updated last week