zmap / zcrypto

Liberal Go TLS + X.509 Library for Research
Other
135 stars 83 forks source link

Add Ordered CipherSuites and Extensions to handshakelog #385

Closed burpheart closed 5 months ago

burpheart commented 5 months ago

Currently, the handshakelog in the zcryptodoes not maintain an ordered list of CipherSuites and Extensions. This can lead to inconsistent results when generating JA3S fingerprints, as the order of CipherSuites and Extensions can vary. If clientHello structure can maintain an ordered list of CipherSuites and Extensions. This would not only ensure consistent results when generating JA3S fingerprints, but also provide a strong feature for fingerprinting, as the order of CipherSuites and Extensions is significant.