akde/infosec

Information security is ultimately about managing risk


JA4S is a sys­tem to hash the con­fig­u­ra­tion of a TLS con­nec­tion. More: ja4/technical_details/README.md at main · FoxIO-LLC/­ja4 · GitHub

Pos­si­ble use cases:

  • Scan the net­work for this ja4s fin­ger­prints and see if expect­ed TLS fin­ger­prints appear. Our sys­tems nor­mal­ly should have only a known sub­set of fingerprints.
  • Block­ing of requests on fire­walls when hav­ing a dis­trib­uted attack­er, but its tool can be iden­ti­fied by the request fingerprint.

Leave a Reply

About

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

Checklists

Categories

Checklists: Ports

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';