Life & fun · alternatives · 2026
24 alternatives to I Implemented a HSTS Super Cookie
Creates a HSTS Supercookie to fingerprint a browser - ben174/hsts-cookie
This project demonstrates how HSTS (HTTP Strict Transport Security) headers can be exploited to create a super cookie that persists across browser sessions and private browsing modes. It fingerprints browsers by… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. I Implemented a HSTS Super Cookie launched in 2016; newer entries below may have overtaken it.
- 1
A protocol for secure browser sessions on the World Wide Web
2023 · websession.dev · its alternatives →
- 2
Ubercookie produces extremely persistent Cookies in your browser using Audio and Graphics fingerprinting techniques.
2016 · ubercookie.robinlinus.com · its alternatives →
- 3
Without your consent most major web platforms leak whether you are logged in. This allows any website to detect on which platforms you
2016 · robinlinus.github.io · its alternatives →
- 4
Use cURL with cookies from Chrome. Contribute to fipso/ccurl.sh development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 5
- 6
A CSS Keylogger▲576Chrome extension and Express server that exploits keylogging abilities of CSS. - maxchehab/CSS-Keylogging
2018 · github.com · its alternatives →
- 7
Marktag▲313All-in-one pixel to recapture audiences for cookieless era
2023 · markopolo.ai · its alternatives →
- 8
- 9
BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
Nov 2025 · github.com · its alternatives →
- 10
🍫 Tastier cookies, local, session, and db storage in a tiny package. Includes subscribe() events for changes. - franciscop/brownies
2016 · github.com · its alternatives →
- 11
- 12FH
2020 · madhash.telekinesis.cloud · its alternatives →
- 13
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com · its alternatives →
- 14
- 15
CookieHub▲69Powerful and easy to use cookie consent solution
2021 · cookiehub.com · its alternatives →
- 16
c15t 2.0▲80Dev-first cookie banners that don't slow your site
May 2026 · c15t.com · its alternatives →
- 17
Shynet▲81Modern, privacy friendly, and cookie free web analytics
2021 · github.com · its alternatives →
- 18
A live demonstration of everything a website learns about you before you click anything. No cookies, no permissions, no consent dialog. Nothing is stored.
Aug 2026 · kuber.studio · its alternatives →
- 19
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
- 20
Persistent visitor identity-fraud prevention & intelligence
Jul 2026 · digitalfingerprintjs.com · its alternatives →
- 21
Hi, I'm Marvin, co-founder of Pirsch Analytics, software engineer, and open-source enthusiast.
2020 · marvinblum.de · its alternatives →
- 22CB
Not new but quite cool. Note: https://creepjs.org/ is NOT official the repo is https://github.com/abrahamjuliot/creepjs Anyone knows how fingerprinting works mathematically? what do they use? when the signals may vary even slightly, your final hash should be sufficiently accurate and stable. A simple hash won't do it. Changing IP, missing cookies/session, resizing window, TLS/SSL browser handshake, screen depth, font rendering, MTR, network latency if you want to measure, etc... any signal alone means little but as a whole mathematically what is…
Apr 2026 · abrahamjuliot.github.io · its alternatives →
- 23DB
Google’s recent announcement of a proposed ‘Device Bound Session Credentials’ feature[1] for Chrome reminded me of a project we worked on last year at my company. We focus on fraud prevention at signup and login (preventing multi-accounting and account theft), but some customers were concerned about post-login security and asked us to add a session hijacking prevention feature to our fraud prevention API. In the end, we decided to just implement a solution in Javascript. We call it session-lock, and it can be used today across all browsers[2] and, theoretically, native mobile apps. For a…
2024 · session-lock.keyri.com · its alternatives →
- 24CC
Morning HN. I worked on a cloud CMS and then pivoted an analytics feature to a standalone SaaS. Pathview focuses on the conversion path rather than general analytics. I want to help users optimize conversions. It doesn’t use cookies, contains 160-characters of JavaScript, and leverages HTTP Messaging for a modern take on an old-school analytics approach. I’m close to launching a public beta test and could use a sanity check. Any advice, feedback, or questions for this first-time developer? -sb
2022 · pathview.io · its alternatives →
Also compare
- WebSession, a Secure Replacement for Cookies alternatives
- Are you trackable? An irrevocable persistent browser cookie alternatives
- Your Social Media Fingerprint (maybe NSFW) alternatives
- Use cookies from Chrome (CDP) in cURL without copy pasting alternatives
- HelloConsent alternatives
- A CSS Keylogger alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →