The ja3evade from snowytoxa

JA3 evader

Simple script demonstrating how easy it is to evade JA3 fingerprinting

Have fun!

ja3evade's People

Contributors

Stargazers

Watchers

ja3evade's Issues

Doesn't bypass CloudFlare's TLS Fingerprint

#!/usr/bin/env python
import ssl
import socket
from random import shuffle

import requests
from requests.adapters import HTTPAdapter
from requests.packages.urllib3.util.ssl_ import create_urllib3_context



def get_ciphers():
    ssl_context = ssl.create_default_context()
    ciphers_list = [cs['name'] for cs in ssl_context.get_ciphers()]
    shuffle(ciphers_list)
    return ':'.join(ciphers_list)


class FakeAdapter(HTTPAdapter):
    def init_poolmanager(self, *args, **kwargs):
        context = create_urllib3_context(ciphers=get_ciphers())
        kwargs['ssl_context'] = context
        return super(FakeAdapter, self).init_poolmanager(*args, **kwargs)

    def proxy_manager_for(self, *args, **kwargs):
        context = create_urllib3_context(ciphers=CIPHERS)
        kwargs['ssl_context'] = context
        return super(FakeAdapter, self).proxy_manager_for(*args, **kwargs)


def example_ssl_socket():
    context = ssl.create_default_context()
    context.set_ciphers(get_ciphers())
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    sslSocket = context.wrap_socket(s, server_hostname='alternativeto.net')
    sslSocket.connect(('alternativeto.net', 443))
    sslSocket.close()





if __name__ == "__main__":
    example_ssl_socket()
    s = requests.Session()
    s.mount('https://alternativeto.net', FakeAdapter())
    r = s.get('https://alternativeto.net')
    print(r.content)

Output (partially):

<html>\n  <head>\n    <title>Access denied</title>\n    <style>.wrapper{font-family:courier,arial,helvetica;max-width:600px;position:absolute;left:20px;right:20px;margin:auto;top:50%;padding-bottom:40px;text-align:center;transform:translate3d(0,-50%,0)}img{width:280px;margin:0 auto 4em;display:block;opacity:.6}.meta{font-size:80%}</style>\n    \n    <script type="text/javascript">\n

Access Denied, I think CloudFlare's TLS Fingerprint is more advanced, do you have any idea how to bypass this anti-bot ? CloudFlare's is more evil than Google.

Recommend Projects