TLS Fingerprint
TLS Fingerprint
https://pkg.go.dev/crypto/tls#ClientHelloInfo
https://developers.cloudflare.com/bots/
Cisco ssl fingerprint is a more complete implementation https://resources.sei.cmu.edu/asset_files/Presentation/2019_017_001_539902.pdf
HTTPS 温故知新(三) —— 直观感受 TLS 握手流程(上) https://halfrost.com/https_tls1-2_handshake/
HTTPS 温故知新(四) —— 直观感受 TLS 握手流程(下) https://halfrost.com/https_tls1-3_handshake/
HTTPS 温故知新(六) —— TLS 中的 Extensions https://halfrost.com/https-extensions/
指纹类型
INVALID: 不合法 BOT Browser Empty Unkown
defensive security https://www.defensive-security.com/blog/hiding-behind-ja3-hash
openssl s_client ssldump tshark tcpdump
https://imququ.com/post/optimize-tls-handshake.html
https://icefrozen.github.io/article/tcpip-4-SSL-TLS-3/
TLS 常见的攻击举例
- Heartbleed(心脏出血)
- Replay Attacks(重放攻击)
- 降级攻击(FREAK,LogJam 和 CurveSwap)
TlsCipherSuite Enum https://learn.microsoft.com/en-us/dotnet/api/system.net.security.tlsciphersuite?view=net-7.0
https://scrapfly.io/web-scraping-tools/ja3-fingerprint
ios cipher values https://developer.apple.com/documentation/security/1550981-ssl_cipher_suite_values
https://www.ssllabs.com/ssltest/analyze.html?d=google.com
OpenSSL: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_session_ticket_cb.html
https://www.openssl.org/docs/man1.1.1/man3/SSL_client_hello_get0_ciphers.html