File fingerprintls.changes of Package fingerprintls
------------------------------------------------------------------- Sun Jul 31 09:11:36 UTC 2016 - mardnh@gmx.de - Update to version 1.0.1.git1469943167.06b770d: * New fingerprints... * Include PID in dynamically generated fingerprints * Added fingerprints and removed one * Cleaning duplicate fingerprints * Added a changelog * Adding a readme for the scripts * Minor updates to README.md * Added install instructions * Added fingerprints ------------------------------------------------------------------- Fri Jul 29 18:56:51 UTC 2016 - mardnh@gmx.de - add apparmor-profile ------------------------------------------------------------------- Fri Jul 29 10:25:52 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1469737334.12256b9: * New fingerprints * Fingerprint Updates * Updated -u to accept usernames instead of uid * removed an include * New fingerprints ------------------------------------------------------------------- Wed Jul 27 18:58:32 UTC 2016 - mardnh@gmx.de - add logrotate file ------------------------------------------------------------------- Tue Jul 26 16:38:24 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1469475843.cf3d208: * New fingerprints... * Added iOS mail app for iOS 9.3.3 * Added fingerprint - Google mail server ------------------------------------------------------------------- Mon Jul 25 15:35:35 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1469458174.cfbb8fb: * Fix implicit-function-declaration warning * Fixed output upon new signature * Removing double include... * Updated fingerprints * More fingerprints... * Added ShadowServer fingerprints ------------------------------------------------------------------- Sat Jul 23 12:45:51 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1469081104.5ef60de: * Updated length of data parsed for server_name * Fixed SNI and logging of dynamic fingerprints... * Broke it fixed it * Create README.md * Formatting for readability ------------------------------------------------------------------- Mon Jul 11 17:37:36 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1468112723.f30acb3: * breaking out 801.2q * Set filter back to normal * Added (still a little sketchy) support for detecting and fingerprinting TLS connections which are inside a Teredo IPv6 in IPv4 tunnel. * Removed duplicated line. * Just some cleanup in the network level processing * Added the beginnings of 6in4 support. * Updated BPF to allow IPv6 to work as with other protocols with a filter to narrow down to "very very probably" client hello packet instead of IPv6 + TCP. * Removed the IPv6 filtering that I was doing in lieu of a BPF filter... becuase I have BPF filter now :) * Commented out something which is not yet complete to avoid confusion and added an assortment of fingerprints * Added numerous fingerprints * Changed the interpreter line to use env so it works on systems with another path * I broke IPv6... I fixed IPv6! * Change logging format to JSON. This is the intended output type longer term and that human readable log files will be based on this json log being parsed. * This is very incomplete, but just using it as a quick way to 'tail' the new json log and output in human readable form. * added the -l option. The logging that was previously to stdout is now to file, line buffered, in JSON format. * Fixed bad quotes in the json output for non ipv4 traffic * Better output for non-ipv4 addressing * And fixed the if statements... oops * Moved code from one section of packet_processing.c to another and broke a variable, so manually setting AF_INET/AF_INET6 when outputting JSON logs.. IPv6 should look like IPv6 again * Yeah using brakets to delimit port number on IPv6 addresses isn't great for reading, made it a space * And with source.... ahem * Minor fingerprint updates * Update to add the "-P" flag. * Added GPL licence header for consistency * Added dridex signatures to fingerprint database * Added checks for various offsets pointing beyond the end of the packet. * Added sqlmap to the fingerprints database * Different compilers disagree on what's -pedantic safe.... so I've removed this to make it happier... I'm looking at you gcc * Fixed two issues which could cause a segfault. If you have suffered intermittent crashes I would really recommend updating! * Should fix signal handling. * Added a number of browser fingerprints.. * Added new fingerprints * Minor fingerprint database updates... * Adding BlackHat Arsenal Badge * Added TLS1.3 support and new Fingerprints * Adding edge back in... * Commit minor code change to make TLS1.3 work * Updated output to account for TLS1.3 * Fix typo * Add new fingerprints * Adding Travis Slack integration * Slack Travis Integration * Adding licence file in addition to in-source * Fixing a bad merge (oops) * Revert "Merge branch 'master' of https://github.com/LeeBrotherston/tls-fingerprinting" * Re-instantiating fingerprints I rolled back.... * Re-fixing the issue I rolled back because *sigh* * Updateing the DB in line with fingerprints file * Added setgroups to the privilege dropping code * Missed a bracket between test and commit somehow ------------------------------------------------------------------- Sun Jul 03 13:23:59 UTC 2016 - mardnh@gmx.de - Update to version 1.0.0.git1467500429.158f5b0: * Fix typo * Add new fingerprints ------------------------------------------------------------------- Fri Jul 1 18:58:50 UTC 2016 - mardnh@gmx.de - initial version, version 1.0.0
