Alternatives and similar repositories for ja3:

Users that are interested in ja3 are comparing it to the libraries listed below

• trisulnsm / ja3prints
  JA3 TLS Fingerprint database
  ☆77Updated 5 years ago
• salesforce / GQUIC_Protocol_Analyzer
  GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
  ☆76Updated last year
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆30Updated this week
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆93Updated 3 years ago
• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆169Updated 8 months ago
• sandflysecurity / sandfly-file-decloak
  Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
  ☆23Updated 2 years ago
• Polydet / polydet
  Polyglot detector
  ☆21Updated 11 months ago
• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆49Updated this week
• D4-project / BGP-Ranking
  BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)
  ☆72Updated 8 months ago
• PaloAltoNetworks / tcpsession
  A python library to extract TCP sessions from PCAPs.
  ☆22Updated 4 years ago
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 2 years ago
• CommunityHoneyNetwork / rdphoney
  Basic RDP honeypot script
  ☆30Updated 2 years ago
• CERT-Polska / karton-misp-pusher
  ☆16Updated 10 months ago
• hatching / httpreplay
  Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
  ☆95Updated 3 years ago
• Rafiot / pdfid
  Clone of PDFiD by Didier Stevens, as a package and with some improvements.
  ☆36Updated 8 years ago
• D4-project / IPASN-History
  IP ASN History to find ASN announcing an IP and the closest prefix announcing it at a specific date
  ☆90Updated 5 months ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆96Updated last year
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆69Updated 2 months ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆88Updated last year
• FoxIO-LLC / ja4tscan
  JA4TScan is an active TCP server fingerprinting tool.
  ☆72Updated 7 months ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆29Updated last year
• EmergingThreats / threatresearch
  Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
  ☆72Updated 3 months ago
• Cisco-Talos / Winbox_Protocol_Dissector
  ☆72Updated 6 years ago
• trisulnsm / apps
  Plugin packages that provide custom visualizations and analytics capabilities to Trisul Network Analytics.
  ☆16Updated last week
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• muzuiget / mitmpcap
  export mitmproxy traffic to PCAP file
  ☆56Updated last year
• fkie-cad / pcapFS
  A FUSE module to mount captured network data
  ☆37Updated 3 weeks ago
• stanford-esrg / lzr
  LZR quickly detects and fingerprints unexpected services running on unexpected ports.
  ☆169Updated last month
• Cymmetria / ciscoasa_honeypot
  A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
  ☆51Updated 6 years ago
• fox-it / OpenSSH-Network-Parser
  Project to decrypt and parse SSH traffic
  ☆65Updated 4 years ago