Alternatives
Products that do what CreepJS Browser Fingerprinting does
Not new but quite cool. Note: https://creepjs.org/ is NOT official the repo is https://github.com/abrahamjuliot/creepjs Anyone knows how fingerprinting works mathematically? what do they use? when the signals may vary even slightly, your final hash should be sufficiently accurate and stable. A simple hash won't do it. Changing IP, missing cookies/session, resizing window, TLS/SSL browser handshake, screen depth, font rendering, MTR, network latency if you want to measure, etc... any signal alone means little but as a whole mathematically what is…
- 1
- 2
- 3FB
I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.
Mar 2026 · github.com
- 4
- 5
- 6
- 7DC
2018 · github.com
- 8
- 9
- 10RD
2017 · recdnsfp.github.io
- 11TS
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
2023
- 12WS
http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…
2013
- 13TT
PNLS is an open-source offensive tool that captures and displays SSIDs from device's Preferred Network List. This is achieved by sniffing out Probe Requests in the nearby vicinity which are then parsed for SSID and other information, and finally propagated to the web UI. The project was build using a Raspberry Pi with Kali Linux OS. It uses Python, FastAPI and Redis for the backend and React/JavaScript for the frontend. I hope some of you will find this useful. Also, I would love and appreciate some feedback. Thank you.
2023 · github.com
- 14CP
Hi HN, I built CountermarkAI, a lightweight anti-scraping & bot-detection tool for content creators and website owners. It’s designed to help protect your work from unauthorized scraping and AI training, that repurposed your work without permission. How It Works: Use Hashtag – Creators add a unique hashtag to their content as a declaration of ownership. Protect Website – For those running your own sites, simply add a small snippet to your . The protect.js script works asynchronously by sending metadata from every page load back to our servers, logging requests, and flagging known AI-training…
2025 · countermarkai.com
- 15IW
The use case am considering is to do self testing on your site yourself, rather than depending on any third party, I plan to OpenSource it. I am storing the mouse movement coordinates of the user in a javascript array which I plan to send to server every few seconds and save into DB. Where I plan to aggregate the data and show final results. What do you think? http://websymphony.github.com/labs/trackerapp/ Currently tested on only Chrome.
2011
- 16IH
A simple Go-based HTTP proxy designed for detailed inspection of requests and responses. It logs traffic to the console with colorization, automatic decompression, and formatting for common content types, while remaining transparent to the client application. Ideal for debugging API interactions, understanding middleware behavior, or simply getting a clear view of HTTP traffic flow with jq-like pretty-printing & colorization of request/response. Automatically redacts parts of Authorization header to avoid token leakage.
2025 · github.com
- 17CH
There is a growing number of companies offering anti-bot protection SaaS to protect websites from scraping by automated bots based on Puppeteer/Selenium. Most of them rely on browser properties such as headers, javascript properties (window., navigator.), behavior analysis, to build device/user fingerprints and match it against a database of "whitelisted" fingerprints (typical user behavior/settings/device props etc). For the past few months, together with two other devs I have worked on a customized Puppeteer/Playwright scraping backend. It's essentially a drop-in…
2021
- 18AB
Most other IP lookup tools I've found are mostly just trying to push you to signup for their API, which is fine but less useful if you're just trying to figure out which IP addresses in your log files are from sketchy locations and likely to do bad things to your application. I merged together a bunch of APIs and some of our own honeypot collected data to make something I hope devs and security folks find useful. If you want to try out a "bad" IP, try this one: https://wafris.org/ip-lookup/104.244.72.115
2023 · wafris.org
- 19WF
This can be used to find phishing domains or domains matching any pattern you want if you select "custom filter." You can also connect over WebSocket at /ws and use any programming language you want. There may be duplicates because some domains are published in multiple logs. I get data from all of the logs currently included with Chrome, a list of which is available here: https://github.com/google/certificate-transparency-community....
2024 · firehose.lol
- 20SO
Here is a bookmarklet you can use you browse or spy on an Optimizely customer's experiments! javascript:window.jQuery && jQuery.getScript("//gist.github.com/optimizelyspytool/7a7f573ec1657fb7db97/raw"); (highlight and drag this to your bookmark bar on your browser) Since all of their experiment code is made publicly available in the javascript library, rather than server-side decisioning, it's all waiting to be browsed! I saw a site made by the guys over at http://nerdydata.com but has since been removed. Post any interesting finds using the tool!
2014
- 21CO
Jun 2026 · github.com
- 22CI
I've been working on a C# implementation of Keyczar or months now. You can find it on github. http://jbtule.github.com/keyczar-dotnet/ It's feature complete, I've done a lot of unit tests, have about 90% code coverage, run various freely available static analysis, built it on linux and windows, but what I've really lacked is another person to actually look at the code. It's easy to make crypto mistakes, even when you know the common mistakes yourself. So I'd appreciate any comments, code reviews, thoughts, and issues. Thanks!
2013
- 23BS
Hey HN, I'm excited to share ByteWise Search, an innovative open-source search engine I've been building. Unlike traditional search engines, ByteWise is designed to be entirely client-side, running directly in your browser. This means it offers unparalleled privacy, blazing speed, and near-zero traffic consumption for search queries. Why ByteWise Search? My goal was to create a search experience that puts the user first, without compromises on privacy or performance. Here's what makes it unique: * Absolute Privacy: Your search queries never leave your device. All processing happens locally…
2025
- 24WA
Hey HN, I'm [Your Name], the solo founder of WatchMySSL. This tool keeps track of your SSL certificates in one dashboard and sends alerts before they expire, eliminating downtime risks and SEO penalties that can harm your business. I'm eager for your thoughts on: * Use case: Does this solve a problem for you? * Solution: Any features you’d like to see? * Pricing: It's free, but considering a paid version. What features would you consider paying for?
2023 · watchmyssl.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →