8 ms·
> Does cURL have an easy-to-spot fingerprint outside of its headers? If it's a https URL: Yes, the TLS handshake. There are curl builds[1] which try (and succe
by schroeding 2y ago
> Does cURL have an easy-to-spot fingerprint outside of its headers?
If it's a https URL: Yes, the TLS handshake. There are curl builds[1] which try (and succeed) to imitate the TLS handshake (and settings for HTTP/2) of a normal browser, though.
[1] https://github.com/lwthiker/curl-impersonate https://github.com/lwthiker/curl-impersonate
- bennyg 2y agoTo echo further, they may be leaning on something like the [ja4 fingerprint](https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://github.com/FoxIO-LLC/ja4&ved=2ahUKEwiXyJuy1a2LAxXyJkQIHbDYIsUQFnoECAgQAQ&usg=AOvVaw3wX8T9Oh7e_lhGP-l5sgpQ https://www.google.com/url?sa=t&source=web&rct=j&opi=8997844...) (which you'd need to rebuild curl to emulate that chromium version to try and trick).
- ghxst 2y agoCurl-impersonate does this https://github.com/lwthiker/curl-impersonate https://github.com/lwthiker/curl-impersonate