@anonympins/fingerprint 0.4.3 → 0.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/CHANGELOG.md +21 -0
  2. package/README.md +5 -1
  3. package/package.json +1 -1
  4. package/src/js/fingerprint.client.js +831 -635
  5. package/src/js/fingerprint.js +239 -29
  6. package/src/js/tests/fingerprint.client.init.test.js +140 -119
  7. package/src/js/tests/fingerprint.test.js +110 -10
  8. package/src/php/Challenge/ChallengeUtils.php +415 -361
  9. package/src/php/Config/SecurityProfiles.php +276 -271
  10. package/src/php/FingerprintClient.php +131 -131
  11. package/src/php/FingerprintEngine.php +26 -0
  12. package/src/php/RequestContext.php +90 -90
  13. package/src/php/Store/IStore.php +41 -41
  14. package/src/php/Store/RedisStore.php +53 -53
  15. package/src/php/Tests/RequestUtilsTest.php +130 -0
  16. package/src/php/Utils/RequestUtils.php +200 -16
package/CHANGELOG.md CHANGED
@@ -1,3 +1,24 @@
1
+ ## Version 0.4.4
2
+
3
+ ### 🧮 Pattern Score Ratios & Weighted Subscores
4
+ - **Linear Weighted Pattern Scores**: Introduced configurable ratios (`regularityRatio`, `benfordRatio`, `enumerationRatio`) to dynamically adjust the influence of timing regularity, Benford's law deviation, and sequential path enumeration on the final `requestPatternScore`.
5
+
6
+ ### 🕸️ Advanced Client Tracking & Touch Analysis
7
+ - **Mobile Client Touch Analysis**: Implemented detailed analysis of mobile touch events, extracting advanced behavioral metrics such as average pressure, touch radius size, coordinate variance, and multi-touch count to effectively detect automated touch emulation.
8
+ - **WASM Client Caching with IndexedDB**: Added client-side persistent storage of compiled WebAssembly modules in IndexedDB (`wasm-cache-db`) to drastically reduce initialization times, skipping compilation overhead on subsequent visits.
9
+ - **Phantom Interactive Traps**: Added invisible phantom interactive link traps to hook headlessly automated clients via hover/focus events.
10
+
11
+ ### 🛡️ Enhanced Honeypot Protections & Extensibility
12
+ - **External Analyzers Support**: Extended the honeypot subsystem to allow plugging in external analyzers (e.g., custom regex matching or WAF frameworks like ModSecurity) to evaluate request payloads.
13
+ - **Optimized Injection Filters**: Refined input inspection to recursively search deeply nested NoSQL/SQL structures using centralized security algorithms.
14
+
15
+ ### 📶 Stable Subnet Reputation & Rate Limiting
16
+ - **Hardware-Anchored Subnet Metrics**: Refactored subnet score aggregations to anchor suspicious activities to hardware-based device hashes (`deviceHash`) rather than easily cleared tracking cookies, preventing proxy rotation masking.
17
+ - **Subnet Challenge Rate Limiting**: Integrated a Token Bucket rate limiter (`checkChallengeRateLimit`) that throttles challenge requests per IPv4/IPv6 subnet to prevent denial of service (DoS) attacks on verification systems.
18
+
19
+ ### 🤖 Botnet Clustering & Similarity Scores
20
+ - **Botnet Cluster Score**: Implemented network-wide botnet detection (`botnetClusterScore`) using exponential mathematical decay. It groups volatile client requests that share identical stable hardware profiles across distinct IP addresses within a rolling 10-minute window.
21
+
1
22
  ## Version 0.4.3
2
23
 
3
24
  ### 🔒 Rotation Score Hardening (Anti-Spoofing & No-JS Parity)
package/README.md CHANGED
@@ -6,10 +6,14 @@ NodeJS tests : [![Test NodeJS](https://img.shields.io/github/actions/workflow/st
6
6
  [![License](https://img.shields.io/github/license/anonympins/fingerprint)](https://github.com/anonympins/fingerprint/blob/main/LICENSE)
7
7
  ![GitHub commit activity](https://img.shields.io/github/commit-activity/w/anonympins/fingerprint)
8
8
 
9
- A multi-layered behavioral, cryptographic, and network analysis engine designed to identify and mitigate malicious requests (bots, scrapers, session hijacking) in real-time. Supports both **Node.js** and **PHP** environments.
9
+ A multi-layered behavioral, cryptographic, and network analysis engine designed to identify and mitigate malicious requests (bots, scrapers, session hijacking) in real-time. Supports **Node.js**, **Python** and **PHP** environments.
10
10
 
11
11
  ![illustration](https://i.ibb.co/fV1QT6Mf/image-c6e10859baae53bb595112ec08fc9e27.png)
12
12
 
13
+ ### Presentation video
14
+
15
+ [![Presentation](https://i.ibb.co/1tkPS01C/Capture-d-cran-2026-09-07-194728.png)](https://www.youtube.com/watch?v=Ujeznl0JAl4)
16
+
13
17
  ## Key Features
14
18
 
15
19
  - **Multi-Layered Detection**: Combines TLS/JA3/JA4 analysis, HTTP header consistency checks, IP reputation, and behavioral tracking (mouse movements, keystrokes).
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@anonympins/fingerprint",
3
- "version": "0.4.3",
3
+ "version": "0.4.4",
4
4
  "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
5
5
  "main": "index.js",
6
6
  "type": "module",