Initial commit

.github/workflows/go.yml

@@ -0,0 +1,27 @@
+name: Go
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+jobs:
+  build:
+    name: Build
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        go-version: [1.19.x]
+        os: [ubuntu-latest, windows-latest]
+    steps:
+    - name: Set up Go
+      uses: actions/setup-go@v2
+      with:
+        go-version: ${{ matrix.go-version }}
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@v2
+    - name: Get dependencies
+      run: go mod download
+    - name: Build
+      run: go build -v ./...
+    - name: Test
+      run: go test -v ./...

.github/workflows/release.yml

@@ -0,0 +1,25 @@
+name: Release
+on:
+  release:
+    types: [created]
+permissions:
+    contents: write
+    packages: write
+jobs:
+  releases-matrix:
+    name: Release ja3proxy binary
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # build and publish in parallel: linux/amd64, linux/arm64,
+        # windows/amd64, windows/arm64, darwin/amd64, darwin/arm64
+        goos: [ linux, windows, darwin ]
+        goarch: [ amd64, arm64 ]
+    steps:
+      - uses: actions/checkout@v3
+      - uses: wangyoucao577/[email protected]
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          goos: ${{ matrix.goos }}
+          goarch: ${{ matrix.goarch }}
+          binary_name: "ja3proxy"

.gitignore

@@ -0,0 +1,23 @@
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
+
+# Go workspace file
+go.work
+
+*.pem

README.md

@@ -0,0 +1,49 @@
+# JA3Proxy
+
+Customizing TLS (JA3) Fingerprints through HTTP Proxy
+
+## Usage
+
+```bash
+git clone https://github.com/lylemi/ja3proxy
+cd ja3proxy
+make
+./ja3proxy -port 8080 -client 360Browser -version 7.5
+curl -v -k --proxy http://localhost:8080 https://www.example.com
+```
+
+### Perdefined clients and versions
+
+> for full list, see: https://github.com/refraction-networking/utls/blob/master/u_common.go
+
+| Client | Version |
+| ------ | ------- |
+| Golang | 0 |
+| Firefox | 55 |
+| Firefox | 56 |
+| Firefox | 63 |
+| Firefox | 99 |
+| Firefox | 105 |
+| Chrome | 58 |
+| Chrome | 62 |
+| Chrome | 70 |
+| Chrome | 96 |
+| Chrome | 102 |
+| Chrome | 106 |
+| iOS | 12.1 |
+| iOS | 13 |
+| iOS | 14 |
+| Android | 11 |
+| Edge | 85 |
+| Edge | 106 |
+| Safari | 16.0 |
+| 360Browser | 7.5 |
+| QQBrowser | 11.1 |
+
+## Contribution
+
+If you have any ideas or suggestions, please feel free to submit a pull request. We appreciate any contributions.
+
+## Contact
+
+If you have any questions or suggestions, please feel free to contact us.

cert.go

@@ -0,0 +1,52 @@
+package main
+
+import (
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/x509"
+	"crypto/x509/pkix"
+	"encoding/pem"
+	"math/big"
+	"os"
+	"time"
+)
+
+func generateCertificate() error {
+	priv, err := rsa.GenerateKey(rand.Reader, 2048)
+	if err != nil {
+		return err
+	}
+
+	notBefore := time.Now()
+	notAfter := notBefore.Add(365 * 24 * time.Hour)
+	template := x509.Certificate{
+		SerialNumber:          big.NewInt(1),
+		Subject:               pkix.Name{CommonName: "localhost"},
+		NotBefore:             notBefore,
+		NotAfter:              notAfter,
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+		BasicConstraintsValid: true,
+		IsCA:                  true,
+	}
+
+	derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
+	if err != nil {
+		return err
+	}
+
+	certOut, err := os.Create("cert.pem")
+	if err != nil {
+		return err
+	}
+	defer certOut.Close()
+	pem.Encode(certOut, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes})
+
+	keyOut, err := os.OpenFile("key.pem", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)
+	if err != nil {
+		return err
+	}
+	defer keyOut.Close()
+	pem.Encode(keyOut, &pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
+	return nil
+}

go.mod

@@ -0,0 +1,13 @@
+module github.com/lylemi/ja3proxy
+
+go 1.20
+
+require github.com/refraction-networking/utls v1.3.2
+
+require (
+	github.com/andybalholm/brotli v1.0.4 // indirect
+	github.com/gaukas/godicttls v0.0.3 // indirect
+	github.com/klauspost/compress v1.15.15 // indirect
+	golang.org/x/crypto v0.5.0 // indirect
+	golang.org/x/sys v0.5.0 // indirect
+)

go.sum

@@ -0,0 +1,12 @@
+github.com/andybalholm/brotli v1.0.4 h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY=
+github.com/andybalholm/brotli v1.0.4/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig=
+github.com/gaukas/godicttls v0.0.3 h1:YNDIf0d9adcxOijiLrEzpfZGAkNwLRzPaG6OjU7EITk=
+github.com/gaukas/godicttls v0.0.3/go.mod h1:l6EenT4TLWgTdwslVb4sEMOCf7Bv0JAK67deKr9/NCI=
+github.com/klauspost/compress v1.15.15 h1:EF27CXIuDsYJ6mmvtBRlEuB2UVOqHG1tAXgZ7yIO+lw=
+github.com/klauspost/compress v1.15.15/go.mod h1:ZcK2JAFqKOpnBlxcLsJzYfrS9X1akm9fHZNnD9+Vo/4=
+github.com/refraction-networking/utls v1.3.2 h1:o+AkWB57mkcoW36ET7uJ002CpBWHu0KPxi6vzxvPnv8=
+github.com/refraction-networking/utls v1.3.2/go.mod h1:fmoaOww2bxzzEpIKOebIsnBvjQpqP7L2vcm/9KUfm/E=
+golang.org/x/crypto v0.5.0 h1:U/0M97KRkSFvyD/3FSmdP5W5swImpNgle/EHFhOsQPE=
+golang.org/x/crypto v0.5.0/go.mod h1:NK/OQwhpMQP3MwtdjgLlYHnH9ebylxKWv3e0fK+mkQU=
+golang.org/x/sys v0.5.0 h1:MUK/U/4lj1t1oPg0HfuXDN/Z1wv31ZJ/YcPiGccS4DU=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

makefile

@@ -0,0 +1,16 @@
+.PHONY: all build-linux build-windows clean
+
+BINARY_NAME=ja3proxy
+BINARY_LINUX=$(BINARY_NAME)
+BINARY_WINDOWS=$(BINARY_NAME).exe
+
+all: build-linux build-windows
+
+build-linux:
+	GOOS=linux GOARCH=amd64 go build -o $(BINARY_LINUX)
+
+build-windows:
+	GOOS=windows GOARCH=amd64 go build -o $(BINARY_WINDOWS)
+
+clean:
+	rm -f $(BINARY_LINUX) $(BINARY_WINDOWS)