tls-fingerprinting

Fast, local-first web content extraction for LLMs. Scrape, crawl, extract structured data — all from Rust. CLI, REST API, and MCP server.

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies.

Open-source, invisible CAPTCHA that detects AI agents, bots, and headless browsers via 40+ behavioral signals, device & TLS fingerprinting, and SHA-256 proof of work. Self-hosted and privacy-first.

OpenAI-compatible gateway for FreeBuff coding models. Token pool, session lifecycle, TLS stealth, embedded admin dashboard. No ads, no CLI, just /v1/chat/completions.

TLS fingerprint emulation upstream proxy replay any ClientHello

Async fork of Python-TLS-Client with modern asyncio support, updated dependencies, and fixes for issues in the original abandoned library. Includes enhanced compatibility, stability improvements, and ongoing maintenance for Python 3.9–3.13.

PHP extension for browser-fingerprinted HTTP requests, built in Rust

JA4 proxy tooling.

Reverse Engineering Toolkit for Mobile APIs — 14 tools: traffic capture, client generation, TLS/HTTP2 fingerprinting, bot detection, token analysis, auth flow mapping, protobuf decoding, JS bundle scanning, cert pinning bypass, rate limit probing, mock servers, schema comparison

My stab at a TLS Fingerprinting package for golang

JavaScript TLS 1.3/1.2 implementation for Node.js, with full control over cryptographic keys and record layer.

DarkMatter - A high-performance web-security and proxy validation tool

🕵️ Fast Rust CLI for OLX Portugal – browse listings, search thousands of ads, discover deals, and monitor prices. Designed for speed, automation, and multiple output formats for scripts and LLMs.

Browserless scraper for O'Reilly Auto Parts — Bypasses Akamai Bot Manager v2 using TLS fingerprint impersonation (curl_cffi)

High-performance Discord Vanity Sniper with TLS Fingerprinting (Chrome 110), multi-token support, and asynchronous architecture for millisecond-speed URL claiming.

🔍 Collect and analyze TLS handshake fingerprints for improved network security and traffic identification. Access a comprehensive database of 1000+ entries.

Managed .NET 10 wrapper around libcurl-impersonate. Browser-grade TLS, HTTP/2 and HTTP/3 fingerprinting.

Open-source bot protection for websites. Identifies and blocks bots, scrapers, and credential-stuffing tools by fingerprinting how they connect — before any request reaches your server. Self-hosted, deploys in 5 minutes.

Educational reference for resilient API-based job scraping: bypasses Cloudflare via curl_cffi TLS-fingerprint impersonation to call Glassdoor's internal BFF API, with a hardened CLI and a FastAPI job-queue service (async workers, dedup, signed webhooks, health/metrics).

Curated list of NetFlow, network telemetry, flow analysis, JA3/JARM fingerprinting, Zeek tooling, and packet investigation resources for threat hunting and cyber operations.