【学习记录】浏览器指纹相关学习记录（指纹介绍、获取指纹、修改指纹、随机指纹保护隐私等）

用途

不需要用户登录，可以识别是同一个用户，用于反爬虫广告推送等一类的场景

指纹在线查询地址

http://www.fingerprintbrowser.com/

CreepJS

浏览器指纹在线检测网站:代理IP防关联伪装度查询工具

IP检测大师

相关指纹信息

user-agent[http header]:	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
accept:	text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-language:	zh-CN,zh;q=0.9
IP:	223.70.214.162
user-agent[navigator]:	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
platform:	Win32
vendor:	Google Inc.
appName:	Netscape
product:	Gecko
appVersion:	5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
cookieEnabled:	true
language:	zh-CN
mimeTypes:	application/pdf,text/pdf
CPU核心数:	16
local time:	Tue Dec 17 2024 10:33:49 GMT+0800 (中国标准时间)
分辨率:	1920X1080
colorDepth:	24
pixelRatio:	1
maxTouchPoints:	256
触屏支持:	不支持
电量信息:	不支持
webgl vendor:	Google Inc. (NVIDIA)
webgl renderer:	ANGLE (NVIDIA, NVIDIA GeForce GT 880 (0x00001287) Direct3D11 vs_5_0 ps_5_0, D3D11)
webgl图像指纹:	7c22d54fb53acd78578578cdc81b66f3
canvas画布指纹:	f032e156fea817785787883d036c225e
音频指纹:	ba6689f9a19789788778781fc682c8c1
canvas字体指纹：	3e9f78a1dca6786963548578687cb9ba87
css字体指纹：	559cd7041a178678785784c9a306986

浏览器 指纹获取方法

js库 Fingerprint2.js

是一个开源的设备指纹库

https://github.com/fingerprintjs/fingerprintjs

javascript"><script>// Initialize the agent at application startup.const fpPromise = import('https://openfpcdn.io/fingerprintjs/v4').then(FingerprintJS => FingerprintJS.load())// Get the visitor identifier when you need it.fpPromise.then(fp => fp.get()).then(result => {// This is the visitor identifier:const visitorId = result.visitorIdconsole.log(visitorId)}).catch(error => console.error(error))
</script>

https://github.com/niespodd/browser-fingerprinting

音频指纹

js获取音频指纹:

javascript">let AudioContext = window.OfflineAudioContext || window.webkitOfflineAudioContex
let context = new AudioContext(1, 5000, 44100)
let oscillator = context.createOscillator()
oscillator.type = "triangle"
oscillator.frequency.value = 1000
let compressor = context.createDynamicsCompressor()
compressor.threshold.value = -50
compressor.knee.value = 40
compressor.ratio.value = 12
compressor.reduction.value = 20
compressor.attack.value = 0
compressor.release.value = 0.2
oscillator.connect(compressor)
compressor.connect(context.destination);async function sha256(message) {// 把字符串转换为Uint8Arrayconst msgBuffer = new TextEncoder().encode(message);// 计算散列值const hashBuffer = await crypto.subtle.digest('SHA-256', msgBuffer);// 转换为数组const hashArray = Array.from(new Uint8Array(hashBuffer));// 转换为16进制字符串const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');return hashHex;
}oscillator.start()
context.oncomplete = event => {// We have only one channel, so we get it by indexlet samples = event.renderedBuffer.getChannelData(0)let samples_str = JSON.stringify(samples)sha256(samples_str).then(hash => console.log(hash));
};
context.startRendering()

相关屏蔽指纹检测方案

屏蔽所有指纹

uBlock Origin

Privacy Badger 或 uBlock Origin：这些隐私保护扩展也有一些功能，可以帮助降低指纹识别的风险，包括通过 Canvas 来生成指纹

Chrome浏览器插件

随机Canvas画布指纹

Canvas Blocker

Canvas Fingerprint Defender

一个防止 Canvas 指纹识别的扩展，它可以随机化 Canvas 渲染的输出，阻止通过 Canvas 获取设备指纹。

随机webgl图像指纹:

WebGL Fingerprint Defender

指纹测试页面

这些网站可能对测试指纹技术对抗网络抓取软件很有用

测试页面	笔记
Bot / Headless Chrome Detection Tests	非常有用和有用的测试集合
PicassAuth prototype	帆布指纹在类固醇上
https://pixelscan.net/	不是100%可靠，因为它经常显示“不一致”的Chrome在一个新的更新后，但值得检查，因为作者添加了新的有趣的检测功能，每隔一段时间
Browserleaks - Check your browser for privacy leaks	不需要介绍😉
Fake Vision	来自一些🇷🇺家伙的高质量测试页面
Check IP Address Reputation \| IP Reputation Lookup History \| IP Reputation API	商业服务与流行的黑名单免费信誉检查
Check reCAPTCHA 3 score \| AntiCaptcha plugin solver	验证码得分以及一些关于如何优化验证码解决成本的有趣笔记
https://ja3er.com/	SSL / TLS指纹
https://fingerprintjs.com/demo/	适用于基本测试——来自那些相信并声称能在“99.5%”的情况下创造出独特指纹的人
Cover Your Tracks	-
Device Info - Web browser security, privacy, and troubleshooting tool.	-
Am I Unique ?	-
http://uniquemachine.org/	-
DNS Cookies - Identify Related Network Flows	-
whatleaks.com	-
Check reCAPTCHA 3 score \| AntiCaptcha plugin solver	检查您的验证码得分
https://antoinevastel.com/bots/	-
antoinevastel.com	-
Check browser fingerprints	-
https://bot.sannysoft.com/	-
https://webbrowsertools.com/canvas-fingerprint/	-
https://webbrowsertools.com/webgl-fingerprint/	-
https://fingerprint.com/products/bot-detection/	-
CreepJS	真的很恐怖，是最恐怖的