Situation

  • Home
  • Installation
  • Quick start
  • Configuration
  • Backends
  • Roadmap
Deploy
  • Scheduled task
  • Ansible
  • Limiting footprint
Developer
  • Overview
  • Architecture
  • Contributing
  • Module
  • Store
Guides
  • jq one-liners
  • FastAPI
Modules
  • Reference
  • App User
  • ARP
  • Chassis
  • Docker
  • DPKG
  • Host Basic
  • Host CPU
  • Host Disk
  • Host GPU
  • Host Network
  • JA4
  • MSI
  • Netstat
  • Ping
  • Reverse Lookup
  • RPM
  • SNMP
  • SSH
  • TCP Scan
  • TLS
  • V Mware
  • Zypper

JA4

Previous Next

Attempts JA4, JA4S and JA4X fingerprinting

windows linux

JA4Module attempts JA4, JA4S and JA4X fingerprinting

Details

For technical details you look at https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/README.md It first look at TLS endpoints (given by the TLS module) and then tries to connect to them, collecting then JA4, JA4S and JA4X fingerprints.

Dependencies

  • crypto/sha256

  • crypto/tls

  • crypto/x509

  • crypto/x509/pkix

  • encoding/asn1

  • encoding/binary

  • encoding/hex

  • fmt

  • net

  • slices

  • strings

  • time

  • github.com/sirupsen/logrus
Host Network MSI
Menu
Home Installation Quick start Configuration Backends Roadmap
Deploy
Scheduled task Ansible Limiting footprint
Developer
Overview Architecture Contributing Module Store
Guides
jq one-liners FastAPI
Modules
Reference App User ARP Chassis Docker DPKG Host Basic Host CPU Host Disk Host GPU Host Network JA4 MSI Netstat Ping Reverse Lookup RPM SNMP SSH TCP Scan TLS V Mware Zypper

On This Page

Details Dependencies
shadcn theme provided by @asiffer