Initial commit

.github/workflows/go.yml

@@ -0,0 +1,27 @@
+name: Go
+on:
+ push:
+ branches: [ master ]
+ pull_request:
+ branches: [ master ]
+jobs:
+ build:
+ name: Build
+ runs-on: ${{ matrix.os }}
+ strategy:
+ matrix:
+ go-version: [1.19.x]
+ os: [ubuntu-latest, windows-latest]
+ steps:
+ - name: Set up Go
+ uses: actions/setup-go@v2
+ with:
+ go-version: ${{ matrix.go-version }}
+ - name: Check out code into the Go module directory
+ uses: actions/checkout@v2
+ - name: Get dependencies
+ run: go mod download
+ - name: Build
+ run: go build -v ./...
+ - name: Test
+ run: go test -v ./...

.github/workflows/release.yml

@@ -0,0 +1,25 @@
+name: Release
+on:
+ release:
+ types: [created]
+permissions:
+ contents: write
+ packages: write
+jobs:
+ releases-matrix:
+ name: Release ja3proxy binary
+ runs-on: ubuntu-latest
+ strategy:
+ matrix:
+ # build and publish in parallel: linux/amd64, linux/arm64,
+ # windows/amd64, windows/arm64, darwin/amd64, darwin/arm64
+ goos: [ linux, windows, darwin ]
+ goarch: [ amd64, arm64 ]
+ steps:
+ - uses: actions/checkout@v3
+ - uses: wangyoucao577/[email protected]
+ with:
+ github_token: ${{ secrets.GITHUB_TOKEN }}
+ goos: ${{ matrix.goos }}
+ goarch: ${{ matrix.goarch }}
+ binary_name: "ja3proxy"

.gitignore

@@ -0,0 +1,23 @@
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
+
+# Go workspace file
+go.work
+
+*.pem

README.md

@@ -0,0 +1,49 @@
+# JA3Proxy
+
+Customizing TLS (JA3) Fingerprints through HTTP Proxy
+
+## Usage
+
+```bash
+git clone https://github.com/lylemi/ja3proxy
+cd ja3proxy
+make
+./ja3proxy -port 8080 -client 360Browser -version 7.5
+curl -v -k --proxy http:https://localhost:8080 https://www.example.com
+```
+
+### Perdefined clients and versions
+
+> for full list, see: https://github.com/refraction-networking/utls/blob/master/u_common.go
+
+| Client | Version |
+| ------ | ------- |
+| Golang | 0 |
+| Firefox | 55 |
+| Firefox | 56 |
+| Firefox | 63 |
+| Firefox | 99 |
+| Firefox | 105 |
+| Chrome | 58 |
+| Chrome | 62 |
+| Chrome | 70 |
+| Chrome | 96 |
+| Chrome | 102 |
+| Chrome | 106 |
+| iOS | 12.1 |
+| iOS | 13 |
+| iOS | 14 |
+| Android | 11 |
+| Edge | 85 |
+| Edge | 106 |
+| Safari | 16.0 |
+| 360Browser | 7.5 |
+| QQBrowser | 11.1 |
+
+## Contribution
+
+If you have any ideas or suggestions, please feel free to submit a pull request. We appreciate any contributions.
+
+## Contact
+
+If you have any questions or suggestions, please feel free to contact us.

cert.go

@@ -0,0 +1,52 @@
+package main
+
+import (
+ "crypto/rand"
+ "crypto/rsa"
+ "crypto/x509"
+ "crypto/x509/pkix"
+ "encoding/pem"
+ "math/big"
+ "os"
+ "time"
+)
+
+func generateCertificate() error {
+ priv, err := rsa.GenerateKey(rand.Reader, 2048)
+ if err != nil {
+ return err
+ }
+
+ notBefore := time.Now()
+ notAfter := notBefore.Add(365 * 24 * time.Hour)
+ template := x509.Certificate{
+ SerialNumber: big.NewInt(1),
+ Subject: pkix.Name{CommonName: "localhost"},
+ NotBefore: notBefore,
+ NotAfter: notAfter,
+ KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+ ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+ BasicConstraintsValid: true,
+ IsCA: true,
+ }
+
+ derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
+ if err != nil {
+ return err
+ }
+
+ certOut, err := os.Create("cert.pem")
+ if err != nil {
+ return err
+ }
+ defer certOut.Close()
+ pem.Encode(certOut, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes})
+
+ keyOut, err := os.OpenFile("key.pem", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)
+ if err != nil {
+ return err
+ }
+ defer keyOut.Close()
+ pem.Encode(keyOut, &pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
+ return nil
+}

go.mod

@@ -0,0 +1,13 @@
+module github.com/lylemi/ja3proxy
+
+go 1.20
+
+require github.com/refraction-networking/utls v1.3.2
+
+require (
+ github.com/andybalholm/brotli v1.0.4 // indirect
+ github.com/gaukas/godicttls v0.0.3 // indirect
+ github.com/klauspost/compress v1.15.15 // indirect
+ golang.org/x/crypto v0.5.0 // indirect
+ golang.org/x/sys v0.5.0 // indirect
+)

go.sum

@@ -0,0 +1,12 @@
+github.com/andybalholm/brotli v1.0.4 h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY=
+github.com/andybalholm/brotli v1.0.4/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig=
+github.com/gaukas/godicttls v0.0.3 h1:YNDIf0d9adcxOijiLrEzpfZGAkNwLRzPaG6OjU7EITk=
+github.com/gaukas/godicttls v0.0.3/go.mod h1:l6EenT4TLWgTdwslVb4sEMOCf7Bv0JAK67deKr9/NCI=
+github.com/klauspost/compress v1.15.15 h1:EF27CXIuDsYJ6mmvtBRlEuB2UVOqHG1tAXgZ7yIO+lw=
+github.com/klauspost/compress v1.15.15/go.mod h1:ZcK2JAFqKOpnBlxcLsJzYfrS9X1akm9fHZNnD9+Vo/4=
+github.com/refraction-networking/utls v1.3.2 h1:o+AkWB57mkcoW36ET7uJ002CpBWHu0KPxi6vzxvPnv8=
+github.com/refraction-networking/utls v1.3.2/go.mod h1:fmoaOww2bxzzEpIKOebIsnBvjQpqP7L2vcm/9KUfm/E=
+golang.org/x/crypto v0.5.0 h1:U/0M97KRkSFvyD/3FSmdP5W5swImpNgle/EHFhOsQPE=
+golang.org/x/crypto v0.5.0/go.mod h1:NK/OQwhpMQP3MwtdjgLlYHnH9ebylxKWv3e0fK+mkQU=
+golang.org/x/sys v0.5.0 h1:MUK/U/4lj1t1oPg0HfuXDN/Z1wv31ZJ/YcPiGccS4DU=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

makefile

@@ -0,0 +1,16 @@
+.PHONY: all build-linux build-windows clean
+
+BINARY_NAME=ja3proxy
+BINARY_LINUX=$(BINARY_NAME)
+BINARY_WINDOWS=$(BINARY_NAME).exe
+
+all: build-linux build-windows
+
+build-linux:
+ GOOS=linux GOARCH=amd64 go build -o $(BINARY_LINUX)
+
+build-windows:
+ GOOS=windows GOARCH=amd64 go build -o $(BINARY_WINDOWS)
+
+clean:
+ rm -f $(BINARY_LINUX) $(BINARY_WINDOWS)