JA3S fingerprint support - Githubissues

projectdiscovery / tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

MIT License

812 stars 76 forks source link

JA3S fingerprint support #42

Open ehsandeep opened 2 years ago

ehsandeep commented 2 years ago

Adding support for JA3S based TLS fingerprinting.

Reference:

https://engineering.salesforce.com/tls-fingerprinting-with-ja3-and-ja3s-247362855967/

CLI Flag:

   -ja3s                display ja3 fingerprint hash

JSON Flag:

  "ja3s_hash": "XXXXX"

parrasajad commented 1 year ago

putting on hold for now:

calculating ja3s fingerprint hash is not possible with ztls cause it doesn't log all the server hello extensions: https://github.com/zmap/zcrypto/blob/master/tls/tls_handshake.go#L56, https://github.com/zmap/zcrypto/blob/master/tls/tls_handshake.go#L337
packet capture implementation requires libpcap-dev https://github.com/projectdiscovery/tlsx/tree/ja3