Alternatives and similar repositories for ja3prints

Users that are interested in ja3prints are comparing it to the libraries listed below

• fullylegit / ja3
  A wireshark/tshark plugin for the JA3 TLS Client Fingerprinting Algorithm
  ☆58Updated last year
• salesforce / GQUIC_Protocol_Analyzer
  GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
  ☆77Updated last year
• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆173Updated last week
• CapacitorSet / ja3-server
  A proof of concept of JA3 tracking.
  ☆27Updated 6 years ago
• cesarghali / OS-Fingerprinting
  Operating system remote fingerprinting attack and detection tools
  ☆55Updated 11 years ago
• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆49Updated last month
• segofensiva / OSfooler-ng
  OSfooler-ng prevents remote active/passive OS fingerprinting by tools like nmap or p0f
  ☆207Updated 2 years ago
• trisulnsm / trisul-scripts
  Ready to run scripts for network analysis
  ☆88Updated last month
• FlUxIuS / p0f3plus
  A native and unofficial implementation of p0f3 in Python with extra analysis features: It's p0f3+!
  ☆25Updated 3 years ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆94Updated 3 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆30Updated last month
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆101Updated 3 years ago
• D4-project / IPASN-History
  IP ASN History to find ASN announcing an IP and the closest prefix announcing it at a specific date
  ☆91Updated 7 months ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆88Updated last year
• trisulnsm / apps
  Plugin packages that provide custom visualizations and analytics capabilities to Trisul Network Analytics.
  ☆16Updated last week
• NikolaiT / zardaxt
  Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.
  ☆350Updated last year
• secureworks / aristotle
  ☆38Updated 6 months ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆71Updated 4 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆34Updated last year
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆70Updated last month
• egaus / wayfinder
  ☆9Updated 6 years ago
• CIRCL / PyPDNS
  Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.
  ☆81Updated 2 months ago
• MITRECND / bro-http2
  Plugin for Zeek/Bro which provides http2 decoder/analyzer
  ☆31Updated 11 months ago
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆27Updated 5 years ago
• TW-NCERT / ctifeeds
  Cyber Threat Intelligence Feeds
  ☆95Updated 8 years ago
• EmergingThreats / fiddler2pcap
  fiddler output to pcap
  ☆40Updated 11 years ago
• corelight / top-dns
  Top DNS Measurement for Bro
  ☆11Updated 4 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆35Updated last year
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆31Updated 8 months ago