Alternatives and similar repositories for ja3

Users that are interested in ja3 are comparing it to the libraries listed below

• salesforce / jarm
  ☆1,268Updated 2 years ago
• FoxIO-LLC / ja4
  JA4+ is a suite of network fingerprinting standards
  ☆1,593Updated this week
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆394Updated 5 years ago
• zmap / zgrab2
  Fast Application Layer Scanner
  ☆1,986Updated last week
• p0f / p0f
  p0f unofficial git repo
  ☆504Updated 6 years ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,729Updated last year
• buffer / thug
  Python low-interaction honeyclient
  ☆1,018Updated last week
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆541Updated 6 months ago
• cloudflare / mitmengine
  A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
  ☆812Updated last year
• refraction-networking / utls
  Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
  ☆2,099Updated last month
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆383Updated 2 years ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,269Updated last week
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,025Updated last week
• droe / sslsplit
  Transparent SSL/TLS interception
  ☆1,828Updated 2 weeks ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆715Updated 5 months ago
• cisco / joy
  A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
  ☆1,347Updated last year
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,509Updated last year
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,283Updated 2 years ago
• iagox86 / dnscat2
  ☆3,738Updated last year
• Yara-Rules / rules
  Repository of yara rules
  ☆4,575Updated last year
• MISP / misp-warninglists
  Warning lists to inform users of MISP about potential false-positives or other information in indicators
  ☆594Updated 2 weeks ago
• pwnlandia / mhn
  Modern Honey Network
  ☆2,467Updated 11 months ago
• 0x4D31 / fatt
  FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network …
  ☆674Updated 2 years ago
• thinkst / canarytokens
  Canarytokens helps track activity and actions on your network.
  ☆1,977Updated last week
• CUCyber / ja3transport
  Impersonating JA3 signatures
  ☆392Updated last year
• CaliDog / certstream-python
  Python library for connecting to CertStream
  ☆464Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,771Updated last week
• DinoTools / dionaea
  Home of the dionaea honeypot
  ☆777Updated last year
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,787Updated last week
• zmap / zdns
  Fast DNS Lookup Library and CLI Tool
  ☆1,039Updated last week