JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Detecting TLS based malware using ja3

ja3-server based on nginx-ssl-ja3 and fastapi

🔍 Application for detecting command and control (C2) communication through network traffic analysis.

This tool was open sourced as part of JARM Randomizer: Evading JARM Fingerprinting for HiTB Amsterdam 2021.

TLS fingerprinting HTTPS server

A mitmproxy plugin for getting the tls ja3 fingerprint for https requests

A precision-engineered TLS/HTTP client for replicating authentic browser fingerprints.

A crawler-focused forward proxy with fingerprint spoofing

httpmorph is a drop-in replacement for Python's requests library that uses a custom C implementation with BoringSSL instead of Python's standard HTTP stack.

Scrapy download handler that can impersonate browser' TLS signatures or JA3 fingerprints.

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

HAProxy (community) Lua Plugin for JA4 TLS Client-Fingerprinting

Educational Python C2 framework for malware analysis labs and detection engineering research.

See what your TLS fingerprint looks like to antibot systems. JA3/JA4 analysis with risk scoring. Zero dependencies

Async fork of Python-TLS-Client with modern asyncio support, updated dependencies, and fixes for issues in the original abandoned library. Includes enhanced compatibility, stability improvements, and ongoing maintenance for Python 3.9–3.13.

Python binding for curl-impersonate fork via cffi. A http client that can impersonate browser tls/ja3/http2 fingerprints.