Alternatives and similar repositories for ja3prints

Users that are interested in ja3prints are comparing it to the libraries listed below

• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆189Updated 5 months ago
• salesforce / GQUIC_Protocol_Analyzer
  GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
  ☆79Updated 2 years ago
• fullylegit / ja3
  A wireshark/tshark plugin for the JA3 TLS Client Fingerprinting Algorithm
  ☆59Updated 2 years ago
• D4-project / IPASN-History
  IP ASN History to find ASN announcing an IP and the closest prefix announcing it at a specific date
  ☆95Updated last month
• trisulnsm / trisul-scripts
  Ready to run scripts for network analysis
  ☆88Updated 7 months ago
• segofensiva / OSfooler-ng
  OSfooler-ng prevents remote active/passive OS fingerprinting by tools like nmap or p0f
  ☆213Updated 2 years ago
• zmap / zannotate
  Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)
  ☆104Updated 3 weeks ago
• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆50Updated 7 months ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆102Updated 3 years ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆95Updated 3 years ago
• CERT-Polska / hfinger
  Hfinger - fingerprinting HTTP requests
  ☆139Updated 2 years ago
• alphasoc / nfr
  A lightweight tool to score network traffic and flag anomalies
  ☆123Updated last year
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆94Updated last year
• D4-project / BGP-Ranking
  BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)
  ☆75Updated last month
• stanford-esrg / lzr
  LZR quickly detects and fingerprints unexpected services running on unexpected ports.
  ☆183Updated 6 months ago
• FlUxIuS / p0f3plus
  A native and unofficial implementation of p0f3 in Python with extra analysis features: It's p0f3+!
  ☆26Updated 3 years ago
• cesarghali / OS-Fingerprinting
  Operating system remote fingerprinting attack and detection tools
  ☆56Updated 12 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 3 months ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆90Updated 2 years ago
• CapacitorSet / ja3-server
  A proof of concept of JA3 tracking.
  ☆28Updated 6 years ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆56Updated last month
• phishdetect / phishdetect
  PhishDetect is a library to help identify phishing pages
  ☆109Updated 2 years ago
• LeeBrotherston / tls-fingerprinting
  TLS Fingerprinting
  ☆394Updated 5 years ago
• neu5ron / TMInfosec
  Repository of all the sites related to infosec IP/Domain/Hash/SSL/etc OSINT and eventually will include more.
  ☆68Updated this week
• OTRF / openhunt
  ☆35Updated 4 years ago
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated last year
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆32Updated last month
• ioc-fang / ioc-fanger
  Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
  ☆65Updated 2 years ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆37Updated last month
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆101Updated 2 years ago