icon

Situation

  • Home
  • Quick start
  • Setup
  • Security
  • CLI
  • Roadmap
API
  • Overview
  • PostgreSQL
  • SQLite
Deploy
  • Ansible
  • Limiting footprint
  • Scheduled task
  • Sentry
Developer
  • Overview
  • Architecture
  • Contributing
  • Module
  • Store
Modules
  • Reference
  • ARP
  • Chassis
  • Docker
  • DPKG
  • Fingerprint
  • HostBasic
  • HostCPU
  • HostDisk
  • HostGPU
  • HostNetwork
  • JA4
  • LocalUsers
  • MAC Vendor
  • MSI
  • Netstat
  • Ping
  • ReverseLookup
  • RPM
  • SaaS
  • StandardProtocol
  • TCP Scan
  • TLS
  • Users
  • Zypper

JA4

Previous Next

Attempts JA4, JA4S and JA4X fingerprinting

windows linux

JA4Module attempts JA4, JA4S and JA4X fingerprinting

Details

For technical details you look at https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/README.md It first look at TLS endpoints (given by the TLS module) and then tries to connect to them, collecting then JA4, JA4S and JA4X fingerprints.

Dependencies

  • context

  • crypto/sha256

  • crypto/tls

  • crypto/x509

  • crypto/x509/pkix

  • encoding/asn1

  • encoding/binary

  • encoding/hex

  • fmt

  • net

  • slices

  • strings

  • time

  • github.com/sirupsen/logrus
HostNetwork LocalUsers
Menu
Home Quick start Setup Security CLI Roadmap
API
Overview PostgreSQL SQLite
Deploy
Ansible Limiting footprint Scheduled task Sentry
Developer
Overview Architecture Contributing Module Store
Modules
Reference ARP Chassis Docker DPKG Fingerprint HostBasic HostCPU HostDisk HostGPU HostNetwork JA4 LocalUsers MAC Vendor MSI Netstat Ping ReverseLookup RPM SaaS StandardProtocol TCP Scan TLS Users Zypper

On This Page

Details Dependencies
shadcn theme provided by @asiffer