Situation

  • Home
  • Installation
  • Quick start
  • Configuration
  • Backends
  • Roadmap
Guides
  • Ansible
  • jq one-liners
  • FastAPI
Modules
  • Reference
  • App User
  • ARP
  • Chassis
  • Docker
  • DPKG
  • Host Basic
  • Host CPU
  • Host Disk
  • Host GPU
  • Host Network
  • JA4
  • MSI
  • Netstat
  • Ping
  • Reverse Lookup
  • RPM
  • SNMP
  • SSH
  • TCP Scan
  • TLS
  • Zypper
Developer
  • Overview
  • Architecture
  • Contributing
  • Module
  • Store

JA4

Previous Next

Attempts JA4, JA4S and JA4X fingerprinting

windows linux

JA4Module attempts JA4, JA4S and JA4X fingerprinting

Details

For technical details you look at https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/README.md It first look at TLS endpoints (given by the TLS module) and then tries to connect to them, collecting then JA4, JA4S and JA4X fingerprints.

Dependencies

  • crypto/sha256

  • crypto/tls

  • crypto/x509

  • crypto/x509/pkix

  • encoding/asn1

  • encoding/binary

  • encoding/hex

  • fmt

  • net

  • slices

  • strings

  • time

Host Network MSI
Menu
Home Installation Quick start Configuration Backends Roadmap
Guides
Ansible jq one-liners FastAPI
Modules
Reference App User ARP Chassis Docker DPKG Host Basic Host CPU Host Disk Host GPU Host Network JA4 MSI Netstat Ping Reverse Lookup RPM SNMP SSH TCP Scan TLS Zypper
Developer
Overview Architecture Contributing Module Store

On This Page

Details Dependencies
shadcn theme provided by @asiffer