Alternatives and similar repositories for ja3

Users that are interested in ja3 are comparing it to the libraries listed below

• trisulnsm / ja3prints
  JA3 TLS Fingerprint database
  ☆81Updated 6 years ago
• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆204Updated last month
• salesforce / GQUIC_Protocol_Analyzer
  GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
  ☆80Updated 2 years ago
• D4-project / BGP-Ranking
  BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)
  ☆77Updated last month
• D4-project / IPASN-History
  IP ASN History to find ASN announcing an IP and the closest prefix announcing it at a specific date
  ☆96Updated last month
• spyre-project / spyre
  simple YARA-based IOC scanner
  ☆175Updated last month
• CERT-Polska / hfinger
  Hfinger - fingerprinting HTTP requests
  ☆142Updated 2 years ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆95Updated 4 years ago
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆84Updated last month
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆96Updated last year
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆163Updated 10 months ago
• adulau / ssldump
  ssldump - (de-facto repository gathering patches around the cyberspace)
  ☆254Updated this week
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆118Updated this week
• Rafiot / pdfid
  Clone of PDFiD by Didier Stevens, as a package and with some improvements.
  ☆51Updated 9 years ago
• EmergingThreats / threatresearch
  Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
  ☆82Updated last week
• stanford-esrg / lzr
  LZR quickly detects and fingerprints unexpected services running on unexpected ports.
  ☆192Updated last month
• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆50Updated 10 months ago
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆92Updated 9 months ago
• CERT-Polska / n6
  Automated handling of data feeds for security teams
  ☆147Updated last month
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆142Updated 5 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 7 months ago
• muzuiget / mitmpcap
  export mitmproxy traffic to PCAP file
  ☆55Updated 2 years ago
• m-chrome / py-suricataparser
  Pure python parser for Snort/Suricata rules.
  ☆33Updated last year
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆55Updated 2 years ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆39Updated 5 months ago
• trisulnsm / trisul-scripts
  Ready to run scripts for network analysis
  ☆91Updated 10 months ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆33Updated 3 weeks ago
• Northern-Lights / yara-parser
  Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
  ☆85Updated 3 years ago
• StopDDoS / packet-captures
  packet captures of real-world ddos attacks
  ☆167Updated 3 months ago
• stanford-esrg / gps
  GPS is a scanning platform that learns and predicts the location of IPv4 services across all 65K ports.
  ☆77Updated 3 years ago