用途
不需要用户登录,可以识别是同一个用户,用于反爬虫广告推送等一类的场景
指纹在线查询地址
http://www.fingerprintbrowser.com/
CreepJS
浏览器指纹在线检测网站:代理IP防关联伪装度查询工具
IP检测大师
【自动化】Python SeleniumUtil 工具 开启开发者模式 自动安装油猴用户脚本等-CSDN博客文章浏览阅读389次。【自动化】Python SeleniumUtil 工具。https://blog.csdn.net/G971005287W/article/details/144565691?spm=1001.2014.3001.5501【自动化】Python SeleniumUtil 油猴 工具 自动安装用户脚本-CSDN博客文章浏览阅读311次。【自动化】Python SeleniumUtil 工具-CSDN博客。【自动化】Python SeleniumUtil 油猴 工具。【自动化】Python SeleniumUtil 工具。https://blog.csdn.net/G971005287W/article/details/144565736
【Python】使用Selenium 操作浏览器 自动化测试 记录-CSDN博客文章浏览阅读193次。文章浏览阅读42次。【附件】Selenium chromedriver 驱动及浏览器下载。【附件】Selenium chromedriver 驱动及浏览器下载-CSDN博客。3.安装Chrome浏览器驱动。2.安装 selenium。1.安装python。https://blog.csdn.net/G971005287W/article/details/144557463
相关指纹信息
user-agent[http header]: | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 |
accept: | text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 |
accept-language: | zh-CN,zh;q=0.9 |
IP: | 223.70.214.162 |
user-agent[navigator]: | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 |
platform: | Win32 |
vendor: | Google Inc. |
appName: | Netscape |
product: | Gecko |
appVersion: | 5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 |
cookieEnabled: | true |
language: | zh-CN |
mimeTypes: | application/pdf,text/pdf |
CPU核心数: | 16 |
local time: | Tue Dec 17 2024 10:33:49 GMT+0800 (中国标准时间) |
分辨率: | 1920X1080 |
colorDepth: | 24 |
pixelRatio: | 1 |
maxTouchPoints: | 256 |
触屏支持: | 不支持 |
电量信息: | 不支持 |
webgl vendor: | Google Inc. (NVIDIA) |
webgl renderer: | ANGLE (NVIDIA, NVIDIA GeForce GT 880 (0x00001287) Direct3D11 vs_5_0 ps_5_0, D3D11) |
webgl图像指纹: | 7c22d54fb53acd78578578cdc81b66f3 |
canvas画布指纹: | f032e156fea817785787883d036c225e |
音频指纹: | ba6689f9a19789788778781fc682c8c1 |
canvas字体指纹: | 3e9f78a1dca6786963548578687cb9ba87 |
css字体指纹: | 559cd7041a178678785784c9a306986 |
浏览器指纹获取方法
js库 Fingerprint2.js
是一个开源的设备指纹库
https://github.com/fingerprintjs/fingerprintjs
<script>// Initialize the agent at application startup.const fpPromise = import('https://openfpcdn.io/fingerprintjs/v4').then(FingerprintJS => FingerprintJS.load())// Get the visitor identifier when you need it.fpPromise.then(fp => fp.get()).then(result => {// This is the visitor identifier:const visitorId = result.visitorIdconsole.log(visitorId)}).catch(error => console.error(error))
</script>
https://github.com/niespodd/browser-fingerprinting
音频指纹
js获取音频指纹:
let AudioContext = window.OfflineAudioContext || window.webkitOfflineAudioContex
let context = new AudioContext(1, 5000, 44100)
let oscillator = context.createOscillator()
oscillator.type = "triangle"
oscillator.frequency.value = 1000
let compressor = context.createDynamicsCompressor()
compressor.threshold.value = -50
compressor.knee.value = 40
compressor.ratio.value = 12
compressor.reduction.value = 20
compressor.attack.value = 0
compressor.release.value = 0.2
oscillator.connect(compressor)
compressor.connect(context.destination);async function sha256(message) {// 把字符串转换为Uint8Arrayconst msgBuffer = new TextEncoder().encode(message);// 计算散列值const hashBuffer = await crypto.subtle.digest('SHA-256', msgBuffer);// 转换为数组const hashArray = Array.from(new Uint8Array(hashBuffer));// 转换为16进制字符串const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');return hashHex;
}oscillator.start()
context.oncomplete = event => {// We have only one channel, so we get it by indexlet samples = event.renderedBuffer.getChannelData(0)let samples_str = JSON.stringify(samples)sha256(samples_str).then(hash => console.log(hash));
};
context.startRendering()
相关屏蔽指纹检测方案
屏蔽所有指纹
uBlock Origin
Privacy Badger 或 uBlock Origin:这些隐私保护扩展也有一些功能,可以帮助降低指纹识别的风险,包括通过 Canvas 来生成指纹
Chrome浏览器插件
随机Canvas画布指纹
Canvas Blocker
Canvas Fingerprint Defender
一个防止 Canvas 指纹识别的扩展,它可以随机化 Canvas 渲染的输出,阻止通过 Canvas 获取设备指纹。
随机webgl图像指纹:
WebGL Fingerprint Defender
指纹测试页面
这些网站可能对测试指纹技术对抗网络抓取软件很有用
测试页面 | 笔记 |
---|---|
Bot / Headless Chrome Detection Tests | 非常有用和有用的测试集合 |
PicassAuth prototype | 帆布指纹在类固醇上 |
https://pixelscan.net/ | 不是100%可靠,因为它经常显示“不一致”的Chrome在一个新的更新后,但值得检查,因为作者添加了新的有趣的检测功能,每隔一段时间 |
Browserleaks - Check your browser for privacy leaks | 不需要介绍😉 |
Fake Vision | 来自一些🇷🇺家伙的高质量测试页面 |
Check IP Address Reputation | IP Reputation Lookup History | IP Reputation API | 商业服务与流行的黑名单免费信誉检查 |
Check reCAPTCHA 3 score | AntiCaptcha plugin solver | 验证码得分以及一些关于如何优化验证码解决成本的有趣笔记 |
https://ja3er.com/ | SSL / TLS指纹 |
https://fingerprintjs.com/demo/ | 适用于基本测试——来自那些相信并声称能在“99.5%”的情况下创造出独特指纹的人 |
Cover Your Tracks | - |
Device Info - Web browser security, privacy, and troubleshooting tool. | - |
Am I Unique ? | - |
http://uniquemachine.org/ | - |
DNS Cookies - Identify Related Network Flows | - |
whatleaks.com | - |
Check reCAPTCHA 3 score | AntiCaptcha plugin solver | 检查您的验证码得分 |
https://antoinevastel.com/bots/ | - |
antoinevastel.com | - |
Check browser fingerprints | - |
https://bot.sannysoft.com/ | - |
https://webbrowsertools.com/canvas-fingerprint/ | - |
https://webbrowsertools.com/webgl-fingerprint/ | - |
https://fingerprint.com/products/bot-detection/ | - |
CreepJS | 真的很恐怖,是最恐怖的 |