Fingerprinting is a practice in which websites identify a particular browser (and by extension, a particular user) by collecting and combining distinguishing features of the browser and underlying operating system. - Mozilla
A collection of browser fingerprinting projects, research, and resources. Intended as a way to aggregate research surrounding the subject. Please read the contributions section before opening a pull request.
| Library | Description |
|---|---|
| FingerprintJS | FingerprintJS open source library for fingerprinting browsers. |
| CreepJS | A compilation of browser fingerprinting research. |
| Supercookie | Fingerprinting visitors via favicons |
| TorZilla | Fingerprinting Gecko based browsers |
| TLS Fingerprinting | TLS Fingerprinting |
| FingerprintJS BotD | Bot detection library |
| Website Fingerprinting Library | Pytorch-based open-source library for website fingerprinting attacks |
- Blog: Detecting Privacy Badger
- Blog: Salesforce TLS Fingerprinting
- Pixel Perfect: Fingerprinting Canvas in HTML5
- Picasso: Lightweight Device Class Fingerprinting
- Fingerprinting Evasive Bots
- Blog: How anti-fingerprinting extensions tend to make fingerprinting easier
- Blog: Detecting Headless Browsers
- Blog: Detecting Puppeteer through JS Execution
- WebGPU Fingerprinting Attacks
- Who Touched My Browser Fingerprint
- Quantifying the Fingerprintability of Browser Extensions
- Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets
- Cookieless Monster
- Blog: Browser Finerprinting via CSS
- Blog: nullpt.rs
- Blog: http2 Fingerprinting
- One Million Site Tracking Measurements
- DeepFPD: Browser Fingerprinting Detection via Deep Learning
- The Devil is in the Details: Detection, Measurement and Lawfulness of Server-Side Tracking on the Web
| Library | Description | Language |
|---|---|---|
| FingerprintSuite | Evade browser fingerprinting for headless browsers. | Typescript |
| Undetected Chromedriver | Modified selenium thats intended to bypass common headless browser checks | Python |
| PuppeteerExtra | Puppeteer extensions to evade common detections | Typescript |
| Puppeteer With Fingerprints | Puppeteer library to modify the browser fp | Javascript |
| FakeBrowser | Headless Browser Anti-detect | Javascript |
| JS Shelter | Extension to restrict the information gathered through browser fingerprinting | Javascript |
| Privacy Badger | Extension to block basic fingerprinting techniques | Javascript |
| Chameleon | Deprecated: Extension for blocking browser fingerprinting | Javascript |
| uTLS | TLS Impersonation Library | Golang |
| TLS Client | Built on top of uTLS offers a simpler wrapper with more profiles | Golang |
| Curl Impersonate | TLS Impersonation | Python |
| Reqwest Impersonate | TLS Impersonation | Rust |
| PRIMP | TLS Impersonation | Rust |
Contributions are welcome. Please follow the general format when creating a pull request.