Alternatives and similar repositories for ja3:

Users that are interested in ja3 are comparing it to the libraries listed below

• FoxIO-LLC / ja4
  JA4+ is a suite of network fingerprinting standards
  ☆1,199Updated 3 weeks ago
• salesforce / jarm
  ☆1,210Updated last year
• cloudflare / mitmengine
  A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
  ☆810Updated 11 months ago
• zmap / zgrab2
  Fast Application Layer Scanner
  ☆1,836Updated this week
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆385Updated 4 years ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,079Updated last week
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,510Updated 8 months ago
• CUCyber / ja3transport
  Impersonating JA3 signatures
  ☆385Updated last year
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆318Updated last year
• cisco / joy
  A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
  ☆1,326Updated 11 months ago
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,739Updated this week
• 0x4D31 / fatt
  FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network …
  ☆664Updated last year
• refraction-networking / utls
  Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
  ☆1,839Updated this week
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,650Updated this week
• brimdata / zui
  Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.
  ☆1,835Updated this week
• iagox86 / dnscat2
  ☆3,543Updated last year
• darkoperator / dnsrecon
  DNS Enumeration Script
  ☆2,733Updated last week
• MISP / MISP
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  ☆5,609Updated this week
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,244Updated last year
• droe / sslsplit
  Transparent SSL/TLS interception
  ☆1,793Updated 6 months ago
• blechschmidt / massdns
  A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
  ☆3,296Updated 2 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,878Updated 2 months ago
• ivre / ivre
  Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run yo…
  ☆3,657Updated 2 weeks ago
• cowrie / cowrie
  Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
  ☆5,443Updated this week
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,582Updated this week
• Srinivas11789 / PcapXray
  PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highli…
  ☆1,714Updated 3 years ago
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,171Updated this week
• zmap / zdns
  Fast DNS Lookup Library and CLI Tool
  ☆981Updated this week
• Ne0nd0g / merlin
  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
  ☆5,188Updated last month
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,502Updated 4 months ago