JA3S Fingerprint

Generates a JA3S fingerprint to help identify TLS servers based on hashing together values from the Server Hello. Input: A hex stream of the TLS Server Hello record application layer. JA3S Fingerprint lives in the Networking category of the fx menu.

Parameters

Parameter	Type	Required	Default	Description
Input	string	yes	—	Value to transform. Previous step output or a literal.
Input format	string	no	Hex	Choose one of: Hex, Base64, Raw.
Output format	string	no	Hash digest	Choose one of: Hash digest, JA3S string, Full details.

Input is the primary value (previous step output or a literal).

Returned value

Type	Description
string	Result of the JA3S Fingerprint transformation.

Example

Run JA3S Fingerprint

Generates a JA3S fingerprint to help identify TLS servers based on hashing together values from the Server Hello. Adjust optional parameters when the defaults do not match your payload.

1. Set Input to the value to transform (previous step output or a literal).

2. Review Input format, Output format and keep defaults unless your format requires otherwise.

3. Confirm Output value shows the transformed result.