30 open-source projects similar to salesforce/ja3, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network traffic, indexing metadata, and performing network forensics. It functions as a network traffic indexer and security tool that enables the monitoring, querying, and browsing of large-scale network traffic across multi-cluster architectures. The platform distinguishes itself through its ability to manage distributed capture clusters from a centralized administrative dashboard. It integrates external data feeds with internal traffic logs to identify known threats and provides a pro
D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)
Ciphey is an automated decryption tool and cryptographic analysis framework designed to identify and reverse encryptions, encodings, and hashes without requiring a known key or cipher. It functions as a hash cracking engine and a heuristic cipher identifier to recover original plaintext from unknown data patterns. The project features a nested encoding resolver that iteratively unwraps multiple layers of encryption and encoding until readable text is reached. It employs a heuristic cryptanalysis workflow to analyze data characteristics and guess the likely encoding scheme or encryption method
A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
An MCP (Model Context Protocol) server that brings the capabilities of the enigmapython library to LLMs, allowing them to encrypt and decrypt messages using historically accurate Enigma machine emulators
A framework for secure and scalable network traffic analysis - https://netcap.io
RsaCtfTool is a specialized cryptography suite designed for solving capture-the-flag challenges. It serves as a cryptanalysis and key recovery tool used to derive private keys and decrypt data from weak RSA public key implementations. The tool functions as an integer factorization toolkit, employing a variety of mathematical attacks and algorithms to decompose large composite numbers into their prime factors. It integrates with external prime number databases to accelerate the factorization process and identifies specific mathematical vulnerabilities in key generation. Its capabilities cover
Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
rsatool can be used to calculate RSA and RSA-CRT parameters
Aplicación de protección contra filtraciones de documentos desarrollada en Python. Utiliza watermarks cifrados con AES-256 y seguimiento en base de datos para detectar posibles filtraciones. ¡Protege tu propiedad intelectual con tecnología avanzada! 🛡️
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Pure-Python MCP server for encoding, hashing, and crypto-primitives — computed for real, locally.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
ntopng is a web-based network traffic monitoring tool and flow data aggregator. It functions as a network security monitor, an SNMP network management system, and an industrial protocol analyzer for OT and SCADA environments. The system provides specialized inspection for industrial protocols such as Modbus, DNP3, and IEC 60870. It distinguishes itself through behavioral threat detection, encrypted traffic analysis via handshake fingerprinting, and the ability to identify hardware and operating systems using DHCP and MAC address patterns. Its broader capabilities include real-time traffic an
HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.