Alternatives and similar repositories for ja3:

Users that are interested in ja3 are comparing it to the libraries listed below

• FoxIO-LLC / ja4
  JA4+ is a suite of network fingerprinting standards
  ☆1,036Updated 3 weeks ago
• salesforce / jarm
  ☆1,182Updated last year
• zmap / zgrab2
  Fast Go Application Scanner
  ☆1,779Updated last month
• cloudflare / mitmengine
  A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
  ☆809Updated 8 months ago
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆379Updated 4 years ago
• zmap / zmap
  ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
  ☆5,565Updated last week
• darkoperator / dnsrecon
  DNS Enumeration Script
  ☆2,672Updated this week
• ustayready / fireprox
  AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
  ☆1,939Updated last year
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,371Updated this week
• droe / sslsplit
  Transparent SSL/TLS interception
  ☆1,766Updated 3 months ago
• zmap / zdns
  Fast DNS Lookup Library and CLI Tool
  ☆955Updated this week
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆534Updated 9 months ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,213Updated 8 months ago
• iagox86 / dnscat2
  ☆3,470Updated 9 months ago
• p0f / p0f
  p0f unofficial git repo
  ☆471Updated 5 years ago
• CaliDog / certstream-python
  Python library for connecting to CertStream
  ☆428Updated 4 months ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,509Updated 5 months ago
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆298Updated last year
• refraction-networking / utls
  Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
  ☆1,732Updated last month
• alphasoc / flightsim
  A utility to safely generate malicious network traffic patterns and evaluate controls.
  ☆1,272Updated 8 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,824Updated 3 weeks ago
• christophetd / CloudFlair
  🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
  ☆2,637Updated 6 months ago
• buffer / thug
  Python low-interaction honeyclient
  ☆998Updated this week
• Ne0nd0g / merlin
  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
  ☆5,108Updated this week
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,594Updated last month
• scipag / vulscan
  Advanced vulnerability scanning with Nmap NSE
  ☆3,501Updated 3 months ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,001Updated 3 weeks ago
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆6,517Updated this week
• Srinivas11789 / PcapXray
  PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highli…
  ☆1,699Updated 2 years ago
• ivre / ivre
  Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run yo…
  ☆3,505Updated last week