ja3

README

JA3

Impersonating JA3 signatures

https://godocs.io/github.com/89z/ja3

4865-49196-49200-49195-49199-52393-52392-159-158-52394-49327-49325-49326-49324-49188-49192-49187-49191-49162-49172-49161-49171-49315-49311-49314-49310-107-103-57-51-157-156-49313-49309-49312-49308-61-60-53-47-255

• https://github.com/CUCyber/ja3transport/issues/8
• https://github.com/D4-project/sensor-d4-tls-fingerprinting/issues/20
• https://github.com/Danny-Dasilva/CycleTLS/issues/42
• https://github.com/dreadl0ck/ja3/issues/10
• https://github.com/open-ch/ja3/issues/2
• https://github.com/salesforce/ja3
• https://ja3er.com

Documentation

Index

• Constants
• func NewTransport(spec *tls.ClientHelloSpec) http.Transport
• func Parse(ja3 string) (*tls.ClientHelloSpec, error)
• type Hashes
  • func NewHashes(r io.Reader) (Hashes, error)
  • func (h Hashes) JA3(md5 string) string
• type Users
  • func NewUsers(r io.Reader) (Users, error)
  • func (u Users) Agents(md5 string) []string
  • func (u Users) Sort()

Constants

const (
	AllHashes = "https://ja3er.com/getAllHashesJson"
	AllUas    = "https://ja3er.com/getAllUasJson"
)

Functions

func NewTransport

func NewTransport(spec *tls.ClientHelloSpec) http.Transport

NewTransport creates an http.Transport which mocks the given JA3 signature when HTTPS is used.

func Parse

func Parse(ja3 string) (*tls.ClientHelloSpec, error)

Parse creates a ClientHelloSpec based on a JA3 string.

Types

type Hashes

type Hashes []struct {
	MD5 string
	JA3 string
}

func NewHashes

func NewHashes(r io.Reader) (Hashes, error)

func (Hashes) JA3

func (h Hashes) JA3(md5 string) string

type Users

type Users []struct {
	MD5   string
	Count int
	Agent string `json:"User-Agent"`
}

func NewUsers

func NewUsers(r io.Reader) (Users, error)

func (Users) Agents

func (u Users) Agents(md5 string) []string

func (Users) Sort

func (u Users) Sort()