TLS Fingerprinting
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
fingerprintls Added FireFox 52 to fingerprints Mar 29, 2017
fingerprints Added FireFox 52 to fingerprints Mar 29, 2017
scripts Adding a readme for the scripts Jul 31, 2016
.travis.yml Slack Travis Integration Jul 5, 2016
CHANGELOG Added a changelog Jul 31, 2016
LICENCE Adding licence file in addition to in-source Jul 8, 2016
README.md Minor updates to README.md Jul 31, 2016

README.md

TLS Fingerprinting Build Status

These tools are to enable the matching (either on the wire or via pcap), creation, and export of TLS Fingerprints to other formats. For futher information on TLS Fingerprinting:

In summary the tools are:

  • FingerprinTLS: TLS session detection on the wire or PCAP and subsequent fingerprint detetion / creation.

  • Fingerprintout: Export to other formats such as Suricata/Snort rules, ANSI C Structs, "clean" output and xkeyscore (ok, it's regex). NOTE: Because of a lack of flexibility in the suricata/snort rules language, this is currently less accurate than using FingerprinTLS to detect fingerprints and so may require tuning.

  • fingerprints.json: The fingerprint "database" itself.

Please feel free to raise issues and make pull requests to submit code changes, fingerprint submissions, etc.

You can find me on twitter and the project on twitter also.