komuw / ong

ong, is a Go http toolkit.
MIT License
16 stars 4 forks source link

upgrade to ja4 TLS fingerprint #389

Open komuw opened 1 year ago

komuw commented 1 year ago

In https://github.com/komuw/ong/issues/95 (https://github.com/komuw/ong/pull/244) we implemented a TLS fingerprint inspired by ja3.
ja4+ has been released[1]. ja4+ has a number of different fingerprints;

JA4 — TLS Client
JA4S — TLS Server Response
JA4H — HTTP Client
JA4L — Light Distance/Location
JA4X — X509 TLS Certificate
JA4SSH — SSH Traffic
More fingerprints are in development and will be added to the JA4+ family

ja4+ (specifically, ja4 TLS client fingerprint) is replacing the JA3 TLS fingerprinting[1].
ja4 TLS client fingerprint is released under BSD 3-Clause[3] while the others have some commercial license.
This means that we can implement ja4 TLS client fingerprint for ong but not the others.

  1. https://blog.foxio.io/ja4-network-fingerprinting-9376fe9ca637
  2. https://github.com/FoxIO-LLC/ja4
  3. Screenshot from 2023-09-26 20-01-18

komuw commented 1 year ago

https://github.com/gospider007/fp

komuw commented 1 year ago

https://hub.docker.com/r/thatcherthornberry/nginx-ja4