adulau/ssldump
1
0
Fork 0
mirror of https://github.com/adulau/ssldump.git synced 2024-11-22 01:17:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

chg: [doc] An example use-case of JA3

Browse source
This commit is contained in:
Alexandre Dulaunoy 2022-03-06 11:22:21 +01:00
parent deb2566496
commit dacd904f21
Signed by: adulau
GPG key ID: 09E2CD4944E6CBCD
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -26,6 +26,12 @@ includes a JSON output option, supports [JA3](https://github.com/salesforce/ja3)
For more details, check the man page. For more details, check the man page.
## How can I lookup ja3 hashes?
This example will query ja3er.com service to display the known ja3 hashes from the TLS handshaked in the pcap.
`ssldump -r yourcapture.pcap -j | jq -r 'select(.ja3_fp != null) | .ja3_fp' | parallel 'curl -s -X GET 'https://ja3er.com/search/{}' | jq .'`
# Why do you maintain this repository? # Why do you maintain this repository?
Because it's a mess. The software maintenance process for old free (unmaintained) software Because it's a mess. The software maintenance process for old free (unmaintained) software