I Implemented a HSTS Super Cookie

In plain words

This project demonstrates how HSTS (HTTP Strict Transport Security) headers can be exploited to create a super cookie that persists across browser sessions and private browsing modes. It fingerprints browsers by storing data in HSTS preload lists, making it difficult for users to clear. The tool is intended for security researchers and developers interested in browser privacy vulnerabilities and tracking mechanisms.

written from the facts on this page · September 2026

• 
  WebSession, a Secure Replacement for Cookies2023 · websession.dev · ▲182

  A protocol for secure browser sessions on the World Wide Web

• 
  Are you trackable? An irrevocable persistent browser cookie2016 · ubercookie.robinlinus.com · ▲35

  Ubercookie produces extremely persistent Cookies in your browser using Audio and Graphics fingerprinting techniques.

• 
  Use cookies from Chrome (CDP) in cURL without copy pasting2023 · github.com · ▲184

  Use cURL with cookies from Chrome. Contribute to fipso/ccurl.sh development by creating an account on GitHub.

• 
  HelloConsent2021 · ▲104

  Simple cookie consent solution for GDPR compliance

• 
  I built an HTTP client that perfectly mimics Chrome 142Nov 2025 · github.com · ▲39

  BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.

• 
  Superintelligent Cookies2019 · ▲65

  Fortune cookies with GPT-2 generated fortunes

• 
  SimCity, but with Permits▲911

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 2d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 14d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 15d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 9d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 13d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 23d ago · space.bl2.net

• 
  Siftery▲1,018

  Share products you use at work,explore what others are using

  Work · 2016 · siftery.com

• 
  Website Grader▲768

  Grade your website's strengths and weaknesses in seconds.

  Growth · 2016 · website.grader.com

• 
  Truebill▲766

  Find your paid subscriptions and cancel with one click

  Commerce · 2016 · rocketmoney.com

• 
  Oristand▲749

  A super affordable, portable standing desk

  Work · 2016 · oristand.co

• 
  Clearbit Connect▲723

  Rapportive on steroids. See data about contacts in Gmail.

  Growth · 2016 · clearbit.com

• 
  Maître Viral Referral Waiting List▲668

  Create a viral waiting list in 60 seconds

  Growth · 2016 · app.referralhero.com