Open source OSINT automation tool that gathers data on IPs, domains, emails and more from 200+ sources for threat intelligence and attack surface mapping.
salesforce/jarm
An active TLS server fingerprinting tool that sends 10 crafted Client Hello probes to a server and hashes the responses into a JARM fingerprint.
- スター
- 1,326
- フォーク
- 0
- 未解決の Issue
- 0
- 最終コミット
- 2 か月前
主な機能
- 01Sends 10 crafted TLS Client Hello probes to fingerprint a server.
- 02Produces a compact 62-character fingerprint that is easy to compare and share.
- 03Accepts a domain or IP address, with options for input files, ports and proxies.
- 04Includes a shell script for batch scanning large target lists.
- 05Uses only Python, with a Python 2 compatibility note via the ipaddress module.
ユースケース
- Confirming that a fleet of servers uses an identical TLS configuration.
- Grouping internet servers by the software or organization that operates them.
- Hunting for suspicious command-and-control servers in threat intelligence work.
- Batch-fingerprinting a list of domains for security research.
トピック
よくある質問
- jarm とは?
- An active TLS server fingerprinting tool that sends 10 crafted Client Hello probes to a server and hashes the responses into a JARM fingerprint.
- jarm は無料で使えますか?ライセンスは?
- jarm は BSD-3-Clause ライセンスのオープンソースです。商用製品で使う前にライセンス条件を確認してください。
- jarm は今もメンテナンスされていますか?
- 半年以内に更新あり。jarm の最終コミットは 2026年8月13日 です。
- jarm は何に使えますか?
- Confirming that a fleet of servers uses an identical TLS configuration. Grouping internet servers by the software or organization that operates them. Hunting for suspicious command-and-control servers in threat intelligence work. Batch-fingerprinting a list of domains for security research.
- jarm はどこで入手できますか?
- ソースコードとインストール手順は GitHub にあります:https://github.com/salesforce/jarm
概要はプロジェクトの README をもとに AI が生成しています。GitHub の数値は毎日更新されます。
関連プロジェクト
Open-source graph-based OSINT investigation platform that links entities like domains, IPs, emails and wallets through automated enrichers.
Network traffic monitor that flags communication with known malicious domains, IPs, URLs and User-Agents using indicator lists called trails.
Structured study notes in 18 modules covering Linux terminal, networking, permissions, scripting and kernel basics, based on the book Linux Basics for Hackers.
Agent skill and Python service that strip AI provenance marks like C2PA metadata and invisible Unicode from your files.
A small, portable C library implementing X.509 certificates and the TLS and DTLS protocols, suited to embedded systems.