Network Fingerprinting Workshop

Deep-dive into modern network fingerprinting techniques

Learn how to identify and classify network traffic based on unique characteristics. Master TCP/IP fingerprinting, TLS analysis, and BPF filtering techniques.

What You'll Learn

TCP Fingerprinting

p0f passive OS fingerprinting
MuonFP signature analysis
TCP/IP stack characteristics
Window size & TTL analysis

BPF Filtering

Berkeley Packet Filter basics
Converting signatures to bytecode
iptables BPF integration
Traffic blocking techniques

TLS Fingerprinting

JA3/JA3n fingerprints
JA4 modern fingerprinting
Browser vs tool detection
Real-time analysis with Zeek

Progressive Exercises

From basic fingerprint capture to advanced BPF rules and TLS analysis

p0f MuonFP curl zmap masscan hping3 JA3/JA4 Zeek BPF bytecode

Workshop Tools

Fingerprint Checker BPF Compiler

Want to search fingerprints?
Check out ELLIO Platform for advanced fingerprint analysis