Alternatives and similar repositories for ja3

Users that are interested in ja3 are comparing it to the libraries listed below

• FoxIO-LLC / ja4
  JA4+ is a suite of network fingerprinting standards
  ☆1,444Updated 3 weeks ago
• salesforce / jarm
  ☆1,249Updated 2 years ago
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆390Updated 4 years ago
• zmap / zgrab2
  Fast Application Layer Scanner
  ☆1,939Updated last week
• cloudflare / mitmengine
  A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
  ☆812Updated last year
• refraction-networking / utls
  Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
  ☆2,013Updated last month
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆542Updated 3 months ago
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆377Updated last year
• p0f / p0f
  p0f unofficial git repo
  ☆498Updated 6 years ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,514Updated last year
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,726Updated this week
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,201Updated this week
• fooinha / nginx-ssl-ja3
  nginx module for SSL/TLS ja3 fingerprint.
  ☆211Updated 5 months ago
• CaliDog / certstream-python
  Python library for connecting to CertStream
  ☆454Updated last year
• iagox86 / dnscat2
  ☆3,685Updated last year
• buffer / thug
  Python low-interaction honeyclient
  ☆1,019Updated this week
• Yara-Rules / rules
  Repository of yara rules
  ☆4,508Updated last year
• CUCyber / ja3transport
  Impersonating JA3 signatures
  ☆389Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,984Updated 2 weeks ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,648Updated last week
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,947Updated 5 months ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆703Updated 3 months ago
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,130Updated last year
• VirusTotal / yara
  The pattern matching swiss knife
  ☆9,015Updated 3 weeks ago
• ssdeep-project / ssdeep
  Fuzzy hashing API and fuzzy hashing tool
  ☆739Updated 4 years ago
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,268Updated last year
• droe / sslsplit
  Transparent SSL/TLS interception
  ☆1,817Updated 11 months ago
• nsacyber / Mitigating-Web-Shells
  Guidance for mitigation web shells. #nsacyber
  ☆985Updated 2 years ago
• brimdata / zui
  Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.
  ☆1,881Updated last week
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆7,104Updated this week