UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

joy

| |/ | | | | | | | || |/ |/ , | |/ | / root@kitploit: Un paquete para la captura y análisis de datos de flujo de red y datos intraflujo, para investigación de redes, análisis forense y monitoreo de seguridad. Huellas digitales de TLS Addendum: Para nuestras herramientas y datos más recientes de...

undetected-httpx

undetected-httpx undetected-httpx is a multi-purpose HTTP probing toolkit inspired by httpx. It is specifically engineered to bypass modern anti-bot infrastructures by mimicking real-world browser signatures. Traditional HTTP clients are easily fingerprinted and blocked by WAFs. This tool leverag...

veilgate

VeilGate VeilGate is an open-source deception proxy for teams that want to raise the cost of automated security probing without putting fragile block rules in front of real users. It sits in front of a web application, scores each request, and chooses one of three outcomes: Real : forward clean...

jarm

JARM Por favor, lee la publicación inicial del blog sobre JARM para más información. JARM es una herramienta activa de huellas digitales de servidores de seguridad de la capa de transporte TLS. Las huellas digitales de JARM se pueden usar para: Verificar rápidamente que todos los servidores de un...

RustTLSX

RustTLSX 🦀 . An advanced stealth HTTP client for Rust. Built for privacy-conscious developers who need complete control over their network fingerprint. Looks like a browser. Acts like a browser. Written in Rust. Credits & Foundation Built onbogdanfinn/tls-client - the industry-leading TLS...

burp-awesome-tls

Awesome TLS Esta extensión secuestra la pila HTTP y TLS de Burp, lo que te permite suplantar cualquier huella digital TLS de navegador JA3. Potencia Burp Suite y reduce la probabilidad de ser detectado por diversos WAF como CloudFlare, PerimeterX, Akamai, DataDome, etc. Esta extensión funciona si...

mitmengine

MITMEngine DEPRECATION NOTICE: This software is no longer maintained. The goal of this project is to allow for accurate detection of HTTPS interception and robust TLS fingerprinting. This project is based off of The Security Impact of HTTPS Interception, and started as a port to Go of their...

CryptoLyzer v1.6.0

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

ja4 v1.0.1

JA4+™ Network Fingerprinting JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for...

CISA Updates Alert on Pulse Connect Secure

CISA has updated Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities, originally released April 20. This update adds a new Detection section providing information on Impossible Travel and Transport Layer Security TLS Fingerprinting that may be useful in identifying malicious...

Joy - A Package For Capturing And Analyzing Network Flow Data And Intraflow Data, For Network Research, Forensics, And Security Monitoring

Joy is a BSD-licensed libpcap-based software package for extracting data features from live network traffic or packet capture pcap files, using a flow-oriented model similar to that of IPFIX or Netflow, and then representing these data features in JSON. It also contains analysis tools that can be...