Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Known JA3 token parsing issue #14

Closed
Danny-Dasilva opened this issue May 2, 2021 · 1 comment
Closed

Known JA3 token parsing issue #14

Danny-Dasilva opened this issue May 2, 2021 · 1 comment

Comments

@Danny-Dasilva
Copy link
Owner

Danny-Dasilva commented May 2, 2021

Actual behavior TLS handshake fails on http2 servers

Expected behavior TLS handshake succeeds on http2 servers

To Reproduce Steps to reproduce the behavior

  1. use a known ja3 token and request a url with exclusive http2 support such as https://http2.pro/api/v1

Additional Information
After investigation this is a known issue with the way ja3 tokens are being parsed currently in the repo, for http1 servers this should not affect anything but for http2 servers the handshake will fail. Along with this this incorrect parsing produces an incorrect ja3 hash which can be detected. There will be a PR made as soon as this is figured out.


The issue can be found in the utls.SupportedCurvesExtension and utls.KeyShareExtension for chrome which uses the GREASE_PLACEHOLDER along with this the SupportedSignatureAlgorithms needs to be parsed from the JA3 string in order to generate the correct signature scheme relating to the string

@Danny-Dasilva Danny-Dasilva changed the title Known Ja3 token parsing issue Known JA3 token parsing issue May 2, 2021
@Danny-Dasilva
Copy link
Owner Author

Danny-Dasilva commented May 10, 2021

SupportedSignatureAlgorithms needs to be dynamically set somehow. Everything else should not be detectable. See PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant