Skip to content

Commit 5d29b87

Browse files
Update README.md
Added links to the DB, updated the DB section.
1 parent 903c48e commit 5d29b87

File tree

1 file changed

+11
-12
lines changed

1 file changed

+11
-12
lines changed

README.md

Lines changed: 11 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@ JA4+ is a suite of network fingerprinting methods that are easy to use and easy
44

55
Please read our blogs for details on how JA4+ works, why it works, and examples of what can be detected/prevented with it:
66
[JA4+ Network Fingerprinting](https://blog.foxio.io/ja4%2B-network-fingerprinting) (JA4/S/H/L/X/SSH)
7-
[JA4T: TCP Fingerprinting](https://blog.foxio.io/ja4t-tcp-fingerprinting) (JA4T/TS/TScan)
7+
[JA4T: TCP Fingerprinting](https://blog.foxio.io/ja4t-tcp-fingerprinting) (JA4T/TS/TScan)
8+
[Investigating Surfshark and NordVPN with JA4T](https://blog.foxio.io/investigating-surfshark-and-nordvpn-with-ja4t) (JA4T)
89

910

1011
To understand how to read JA4+ fingerprints, see [Technical Details](https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/README.md)
@@ -58,8 +59,8 @@ with more to be announced...
5859
| Windows 10 | ```JA4T=64240_2-1-3-1-1-4_1460_8``` |
5960
| Epson Printer | ```JA4TScan=28960_2-4-8-1-3_1460_3_1-4-8-16``` |
6061

61-
For more, see [ja4plus-mapping.csv](https://github.com/FoxIO-LLC/ja4/blob/main/ja4plus-mapping.csv)
62-
The mapping file is unlicensed and free to use. Feel free to do a pull request with any JA4+ data you find.
62+
For more examples, see [ja4plus-mapping.csv](https://github.com/FoxIO-LLC/ja4/blob/main/ja4plus-mapping.csv)
63+
For a complete database, see [ja4db.com](https://ja4db.com/)
6364

6465
## Plugins
6566

@@ -99,11 +100,10 @@ ja4 [options] [pcap]
99100

100101
## Database
101102

102-
An official JA4+ database of fingerprints, associated applications and recommended detection logic is in the process of being built.
103+
The official JA4+ database of fingerprints, associated applications and recommended detection logic is here: [ja4db.com](https://ja4db.com/)
104+
This database is under very active development. Expect orders of magnitude more fingerprint combinations and data over the next few months (Aug 2024).
103105

104-
In the meantime, see [ja4plus-mapping.csv](https://github.com/FoxIO-LLC/ja4/blob/main/ja4plus-mapping.csv)
105-
106-
Feel free to do a pull request with any JA4+ data you find.
106+
A sample [ja4plus-mapping.csv](https://github.com/FoxIO-LLC/ja4/blob/main/ja4plus-mapping.csv) is also available for quick reference.
107107

108108
## JA4+ Details
109109

@@ -119,7 +119,8 @@ Current methods and implementation details:
119119
| JA4 | JA4 | TLS Client Fingerprinting
120120
| JA4Server | JA4S | TLS Server Response / Session Fingerprinting
121121
| JA4HTTP | JA4H | HTTP Client Fingerprinting
122-
| JA4Latency | JA4L | Latency Measurment / Light Distance
122+
| JA4Latency | JA4L | Client to Server Latency Measurment / Light Distance
123+
| JA4LatencyServer | JA4LS | Server to Client Latency Measurement / Light Distance
123124
| JA4X509 | JA4X | X509 TLS Certificate Fingerprinting
124125
| JA4SSH | JA4SSH | SSH Traffic Fingerprinting
125126
| JA4TCP | JA4T | TCP Client Fingerprinting
@@ -134,16 +135,14 @@ To understand how to read JA4+ fingerprints, see [Technical Details](https://git
134135

135136
__JA4: TLS Client Fingerprinting__ is [open-source, BSD 3-Clause](https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE-JA4), same as JA3. FoxIO does not have patent claims and is not planning to pursue patent coverage for JA4 TLS Client Fingerprinting. This allows any company or tool currently utilizing JA3 to immediately upgrade to JA4 without delay.
136137

137-
__JA4S, JA4L, JA4H, JA4X, JA4SSH, JA4T, JA4TScan and all future additions, (collectively referred to as JA4+)__ are licensed under the [FoxIO License 1.1](https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE). This license is permissive for most use cases, including for academic and internal business purposes, but is not permissive for monetization. If, for example, a company would like to use JA4+ internally to help secure their own company, that is permitted. If, for example, a vendor would like to sell JA4+ fingerprinting as part of their product offering, they would need to request an OEM license from us.
138+
__JA4S, JA4L, JA4LS, JA4H, JA4X, JA4SSH, JA4T, JA4TS, JA4TScan and all future additions, (collectively referred to as JA4+)__ are licensed under the [FoxIO License 1.1](https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE). This license is permissive for most use cases, including for academic and internal business purposes, but is not permissive for monetization. If, for example, a company would like to use JA4+ internally to help secure their own company, that is permitted. If, for example, a vendor would like to sell JA4+ fingerprinting as part of their product offering, they would need to request an OEM license from us.
138139

139140
All JA4+ methods are patent pending.
140141
JA4+ is a trademark of FoxIO
141142

142143
JA4+ can and is being implemented into open source tools, see the [License FAQ](https://github.com/FoxIO-LLC/ja4/blob/main/License%20FAQ.md) for details.
143144

144-
This licensing allows us to provide JA4+ to the world in a way that is open and immediately usable, but also provides us with a way to fund continued support, research into new methods, and the development of the upcoming JA4 Database. We want everyone to have the ability to utilize JA4+ and are happy to work with vendors and open source projects to help make that happen.
145-
146-
[ja4plus-mapping.csv](https://github.com/FoxIO-LLC/ja4/blob/main/ja4plus-mapping.csv) is not included in the above software licenses and is thereby a license-free file.
145+
This licensing allows us to provide JA4+ to the world in a way that is open and immediately usable, but also provides us with a way to fund continued support, research into new methods, and the development of the JA4+ Database. We want everyone to have the ability to utilize JA4+ and are happy to work with vendors and open source projects to help make that happen.
147146

148147
## Q&A
149148

0 commit comments

Comments
 (0)