fingerprint-mcp 0.1.0

package/dist/data/favicon-hashes.js

@@ -0,0 +1,249 @@
+/**
+ * Favicon MurmurHash3 database for application fingerprinting.
+ *
+ * Shodan computes a signed 32-bit MurmurHash3 of the raw favicon bytes (after
+ * base64-encoding and joining lines with \n). The resulting hash is deterministic
+ * for a given favicon file. Many applications ship a default favicon that never
+ * changes across installations, making the hash a reliable fingerprint.
+ *
+ * Usage in Shodan: http.favicon.hash:<hash>
+ *
+ * References:
+ *  - https://www.shodan.io/search/facet?query=http.favicon.hash
+ *  - https://github.com/Viralmaniar/Favicon-Hash-For-Shodan
+ */
+export const FAVICON_HASHES = [
+    // ──────────────────────────────────────────────────
+    // CI/CD & DevOps
+    // ──────────────────────────────────────────────────
+    {
+        hash: -586023785,
+        name: "Jenkins",
+        category: "ci-cd",
+    },
+    {
+        hash: 81586312,
+        name: "Jenkins (blue ocean)",
+        category: "ci-cd",
+    },
+    {
+        hash: -1293290337,
+        name: "GitLab CE/EE",
+        category: "ci-cd",
+    },
+    {
+        hash: -1231872293,
+        name: "Argo CD",
+        category: "ci-cd",
+    },
+    {
+        hash: 1485257654,
+        name: "Sonatype Nexus Repository",
+        category: "ci-cd",
+    },
+    {
+        hash: -473653720,
+        name: "JFrog Artifactory",
+        category: "ci-cd",
+    },
+    {
+        hash: 1917443752,
+        name: "SonarQube",
+        category: "ci-cd",
+    },
+    {
+        hash: 595148549,
+        name: "Harbor Registry",
+        category: "ci-cd",
+    },
+    // ──────────────────────────────────────────────────
+    // Monitoring & Observability
+    // ──────────────────────────────────────────────────
+    {
+        hash: -1399433489,
+        name: "Grafana",
+        category: "monitoring",
+    },
+    {
+        hash: -1811827550,
+        name: "Kibana",
+        category: "monitoring",
+    },
+    {
+        hash: 1571196100,
+        name: "Prometheus",
+        category: "monitoring",
+    },
+    {
+        hash: -580765191,
+        name: "Graylog",
+        category: "monitoring",
+    },
+    {
+        hash: 999357577,
+        name: "Zabbix",
+        category: "monitoring",
+    },
+    {
+        hash: -412708573,
+        name: "Nagios",
+        category: "monitoring",
+    },
+    {
+        hash: -54810069,
+        name: "Cacti",
+        category: "monitoring",
+    },
+    // ──────────────────────────────────────────────────
+    // Firewalls & Network Security
+    // ──────────────────────────────────────────────────
+    {
+        hash: 945408572,
+        name: "FortiGate (Fortinet)",
+        category: "firewall",
+    },
+    {
+        hash: -305179312,
+        name: "pfSense",
+        category: "firewall",
+    },
+    {
+        hash: 1485478972,
+        name: "OPNsense",
+        category: "firewall",
+    },
+    {
+        hash: 362091310,
+        name: "Citrix NetScaler / ADC",
+        category: "firewall",
+    },
+    // ──────────────────────────────────────────────────
+    // Network Equipment & Infrastructure
+    // ──────────────────────────────────────────────────
+    {
+        hash: -1011037059,
+        name: "Ubiquiti UniFi Controller",
+        category: "network",
+    },
+    {
+        hash: 1898498554,
+        name: "MikroTik RouterOS",
+        category: "network",
+    },
+    {
+        hash: -831237885,
+        name: "Traefik Dashboard",
+        category: "network",
+    },
+    // ──────────────────────────────────────────────────
+    // CMS & Web Applications
+    // ──────────────────────────────────────────────────
+    {
+        hash: -335242539,
+        name: "phpMyAdmin",
+        category: "cms",
+    },
+    {
+        hash: 116323821,
+        name: "Spring Boot (default Leaf favicon)",
+        category: "cms",
+    },
+    {
+        hash: 1117779739,
+        name: "Apache Tomcat (default)",
+        category: "cms",
+    },
+    {
+        hash: -428315662,
+        name: "Webmin",
+        category: "cms",
+    },
+    {
+        hash: -160464759,
+        name: "cPanel",
+        category: "cms",
+    },
+    {
+        hash: -2044357687,
+        name: "Plesk",
+        category: "cms",
+    },
+    {
+        hash: -244487534,
+        name: "RabbitMQ Management",
+        category: "cms",
+    },
+    // ──────────────────────────────────────────────────
+    // Database & Search
+    // ──────────────────────────────────────────────────
+    {
+        hash: -536764016,
+        name: "Elasticsearch",
+        category: "database",
+    },
+    {
+        hash: -656811182,
+        name: "CouchDB Fauxton",
+        category: "database",
+    },
+    // ──────────────────────────────────────────────────
+    // Security & IAM
+    // ──────────────────────────────────────────────────
+    {
+        hash: -1073546895,
+        name: "HashiCorp Vault",
+        category: "security",
+    },
+    {
+        hash: 113734322,
+        name: "HashiCorp Consul",
+        category: "security",
+    },
+    {
+        hash: -1166125415,
+        name: "Keycloak",
+        category: "security",
+    },
+    // ──────────────────────────────────────────────────
+    // Storage & NAS
+    // ──────────────────────────────────────────────────
+    {
+        hash: -822940097,
+        name: "MinIO",
+        category: "storage",
+    },
+    {
+        hash: -1535817075,
+        name: "Synology DSM",
+        category: "storage",
+    },
+    {
+        hash: 1262005765,
+        name: "QNAP QTS",
+        category: "storage",
+    },
+    // ──────────────────────────────────────────────────
+    // Management & Orchestration
+    // ──────────────────────────────────────────────────
+    {
+        hash: -1889921692,
+        name: "Atlassian Jira",
+        category: "management",
+    },
+    {
+        hash: -305317842,
+        name: "Atlassian Confluence",
+        category: "management",
+    },
+    {
+        hash: -1950415971,
+        name: "Kubernetes Dashboard",
+        category: "management",
+    },
+    {
+        hash: 671932091,
+        name: "Portainer",
+        category: "management",
+    },
+];
+//# sourceMappingURL=favicon-hashes.js.map

package/dist/data/favicon-hashes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"favicon-hashes.js","sourceRoot":"","sources":["../../src/data/favicon-hashes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAsBH,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,qDAAqD;IACrD,iBAAiB;IACjB,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,OAAO;KAClB;IAED,qDAAqD;IACrD,6BAA6B;IAC7B,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,QAAQ;QACf,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,YAAY;KACvB;IAED,qDAAqD;IACrD,+BAA+B;IAC/B,qDAAqD;IACrD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,UAAU;KACrB;IAED,qDAAqD;IACrD,qCAAqC;IACrC,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,SAAS;KACpB;IAED,qDAAqD;IACrD,yBAAyB;IACzB,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,KAAK;KAChB;IAED,qDAAqD;IACrD,oBAAoB;IACpB,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;KACrB;IAED,qDAAqD;IACrD,iBAAiB;IACjB,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,UAAU;KACrB;IAED,qDAAqD;IACrD,gBAAgB;IAChB,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,SAAS;KACpB;IAED,qDAAqD;IACrD,6BAA6B;IAC7B,qDAAqD;IACrD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,SAAS;QAChB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,CAAC,UAAU;QACjB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,YAAY;KACvB;CACF,CAAC"}

package/dist/data/h2-signatures.d.ts

@@ -0,0 +1,50 @@
+/**
+ * HTTP/2 SETTINGS frame fingerprints for server implementation identification.
+ *
+ * When an HTTP/2 connection is established, the server sends a SETTINGS frame
+ * (RFC 7540 Section 6.5) containing its preferred protocol parameters. Different
+ * HTTP/2 implementations choose distinct default values and orderings for these
+ * settings, creating a reliable passive fingerprint.
+ *
+ * Additionally, idle connection GOAWAY behavior (timeout duration and debug data)
+ * varies across implementations, providing a secondary identification signal.
+ *
+ * SETTINGS frame parameters (RFC 7540 Section 6.5.2):
+ *  - HEADER_TABLE_SIZE      (0x1) - HPACK dynamic table size
+ *  - ENABLE_PUSH            (0x2) - Server push enabled (0 or 1)
+ *  - MAX_CONCURRENT_STREAMS (0x3) - Max simultaneous streams
+ *  - INITIAL_WINDOW_SIZE    (0x4) - Flow-control window size
+ *  - MAX_FRAME_SIZE         (0x5) - Largest frame payload
+ *  - MAX_HEADER_LIST_SIZE   (0x6) - Max header list size
+ *
+ * References:
+ *  - RFC 7540 (HTTP/2)
+ *  - https://github.com/AliasIO/wappalyzer
+ *  - https://www.blackhat.com/docs/eu-17/materials/eu-17-Shuster-Passive-Fingerprinting-Of-HTTP2-Clients-wp.pdf
+ */
+/** HTTP/2 SETTINGS frame signature for a known server implementation. */
+export interface H2Signature {
+    /** Server or implementation name */
+    server: string;
+    /** Expected SETTINGS frame parameters (undefined means the setting is not sent) */
+    settings: {
+        /** HPACK header table size in bytes */
+        headerTableSize?: number;
+        /** Whether server push is enabled (0 = disabled, 1 = enabled) */
+        enablePush?: number;
+        /** Maximum number of concurrent streams */
+        maxConcurrentStreams?: number;
+        /** Initial flow-control window size in bytes */
+        initialWindowSize?: number;
+        /** Maximum frame payload size in bytes */
+        maxFrameSize?: number;
+        /** Maximum header list size in bytes */
+        maxHeaderListSize?: number;
+    };
+    /** Idle timeout in seconds before the server sends GOAWAY */
+    goawayTimeout?: number;
+    /** Expected content of the GOAWAY debug data field */
+    goawayDebugData?: string;
+}
+export declare const H2_SIGNATURES: H2Signature[];
+//# sourceMappingURL=h2-signatures.d.ts.map

package/dist/data/h2-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"h2-signatures.d.ts","sourceRoot":"","sources":["../../src/data/h2-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,QAAQ,EAAE;QACR,uCAAuC;QACvC,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,iEAAiE;QACjE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,2CAA2C;QAC3C,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,gDAAgD;QAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,0CAA0C;QAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,wCAAwC;QACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,aAAa,EAAE,WAAW,EAyLtC,CAAC"}

package/dist/data/h2-signatures.js

@@ -0,0 +1,211 @@
+/**
+ * HTTP/2 SETTINGS frame fingerprints for server implementation identification.
+ *
+ * When an HTTP/2 connection is established, the server sends a SETTINGS frame
+ * (RFC 7540 Section 6.5) containing its preferred protocol parameters. Different
+ * HTTP/2 implementations choose distinct default values and orderings for these
+ * settings, creating a reliable passive fingerprint.
+ *
+ * Additionally, idle connection GOAWAY behavior (timeout duration and debug data)
+ * varies across implementations, providing a secondary identification signal.
+ *
+ * SETTINGS frame parameters (RFC 7540 Section 6.5.2):
+ *  - HEADER_TABLE_SIZE      (0x1) - HPACK dynamic table size
+ *  - ENABLE_PUSH            (0x2) - Server push enabled (0 or 1)
+ *  - MAX_CONCURRENT_STREAMS (0x3) - Max simultaneous streams
+ *  - INITIAL_WINDOW_SIZE    (0x4) - Flow-control window size
+ *  - MAX_FRAME_SIZE         (0x5) - Largest frame payload
+ *  - MAX_HEADER_LIST_SIZE   (0x6) - Max header list size
+ *
+ * References:
+ *  - RFC 7540 (HTTP/2)
+ *  - https://github.com/AliasIO/wappalyzer
+ *  - https://www.blackhat.com/docs/eu-17/materials/eu-17-Shuster-Passive-Fingerprinting-Of-HTTP2-Clients-wp.pdf
+ */
+export const H2_SIGNATURES = [
+    {
+        server: "Nginx",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 128,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 16384,
+        },
+        goawayTimeout: 60,
+    },
+    {
+        server: "Nginx (tuned)",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 256,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 32768,
+        },
+        goawayTimeout: 60,
+    },
+    {
+        server: "Apache httpd (mod_http2)",
+        settings: {
+            headerTableSize: 8192,
+            enablePush: 1,
+            maxConcurrentStreams: 100,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 25600,
+        },
+        goawayTimeout: 0,
+        goawayDebugData: "",
+    },
+    {
+        server: "Envoy Proxy",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 2147483647,
+            initialWindowSize: 268435456,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 60000,
+        },
+        goawayTimeout: 300,
+        goawayDebugData: "",
+    },
+    {
+        server: "Cloudflare",
+        settings: {
+            headerTableSize: 65536,
+            enablePush: 0,
+            maxConcurrentStreams: 256,
+            initialWindowSize: 65536,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 16384,
+        },
+        goawayTimeout: 900,
+    },
+    {
+        server: "AWS Application Load Balancer",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 128,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 131072,
+        },
+        goawayTimeout: 60,
+    },
+    {
+        server: "Caddy",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 250,
+            initialWindowSize: 1048576,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 8192,
+        },
+        goawayTimeout: 0,
+    },
+    {
+        server: "LiteSpeed",
+        settings: {
+            headerTableSize: 65536,
+            enablePush: 1,
+            maxConcurrentStreams: 100,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 65536,
+        },
+        goawayTimeout: 300,
+    },
+    {
+        server: "Node.js (http2 module)",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 1,
+            maxConcurrentStreams: 4294967295,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+        },
+        goawayTimeout: 120,
+        goawayDebugData: "",
+    },
+    {
+        server: "Go net/http2",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 250,
+            initialWindowSize: 1048576,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 10485760,
+        },
+        goawayTimeout: 0,
+        goawayDebugData: "graceful_stop",
+    },
+    {
+        server: "Microsoft IIS / Kestrel",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 1,
+            maxConcurrentStreams: 100,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 32768,
+        },
+        goawayTimeout: 120,
+    },
+    {
+        server: "Akamai Ghost",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 100,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 32768,
+        },
+        goawayTimeout: 120,
+    },
+    {
+        server: "Fastly (H2O / Varnish)",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 100,
+            initialWindowSize: 262144,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 65536,
+        },
+        goawayTimeout: 60,
+    },
+    {
+        server: "Traefik",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 250,
+            initialWindowSize: 1048576,
+            maxFrameSize: 16384,
+            maxHeaderListSize: 10485760,
+        },
+        goawayTimeout: 0,
+        goawayDebugData: "graceful_stop",
+    },
+    {
+        server: "gRPC (Go)",
+        settings: {
+            headerTableSize: 4096,
+            enablePush: 0,
+            maxConcurrentStreams: 4294967295,
+            initialWindowSize: 65535,
+            maxFrameSize: 16384,
+        },
+        goawayTimeout: 0,
+        goawayDebugData: "max_age",
+    },
+];
+//# sourceMappingURL=h2-signatures.js.map

package/dist/data/h2-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"h2-signatures.js","sourceRoot":"","sources":["../../src/data/h2-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA2BH,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C;QACE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,MAAM,EAAE,0BAA0B;QAClC,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,EAAE;KACpB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,UAAU;YAChC,iBAAiB,EAAE,SAAS;YAC5B,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,GAAG;QAClB,eAAe,EAAE,EAAE;KACpB;IACD;QACE,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE;YACR,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,GAAG;KACnB;IACD;QACE,MAAM,EAAE,+BAA+B;QACvC,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,MAAM;SAC1B;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,IAAI;SACxB;QACD,aAAa,EAAE,CAAC;KACjB;IACD;QACE,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE;YACR,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,GAAG;KACnB;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,UAAU;YAChC,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;SACpB;QACD,aAAa,EAAE,GAAG;QAClB,eAAe,EAAE,EAAE;KACpB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,QAAQ;SAC5B;QACD,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,eAAe;KACjC;IACD;QACE,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,GAAG;KACnB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,GAAG;KACnB;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,MAAM;YACzB,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,KAAK;SACzB;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,GAAG;YACzB,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,QAAQ;SAC5B;QACD,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,eAAe;KACjC;IACD;QACE,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE;YACR,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,oBAAoB,EAAE,UAAU;YAChC,iBAAiB,EAAE,KAAK;YACxB,YAAY,EAAE,KAAK;SACpB;QACD,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,SAAS;KAC3B;CACF,CAAC"}

package/dist/data/header-order.d.ts

@@ -0,0 +1,38 @@
+/**
+ * HTTP response header ordering signatures for server identification.
+ *
+ * Different HTTP server implementations emit response headers in a characteristic
+ * order that is determined by the source code, not by any standard. By recording the
+ * order of canonical header names in a response and comparing against known signatures
+ * we can passively fingerprint the server software -- even when the Server header is
+ * stripped or spoofed.
+ *
+ * The hash is computed by joining the lowercased header names with commas and taking
+ * a simple FNV-1a 32-bit hash of the resulting string.
+ *
+ * References:
+ *  - https://httprobe.org
+ *  - Nmap HTTP fingerprinting engine
+ */
+/** A known header-order signature entry. */
+export interface HeaderOrderSignature {
+    /** The server software name */
+    server: string;
+    /** Canonical header names in the order they appear in a typical response */
+    order: string[];
+    /** Precomputed SHA-256-based short hash of the joined header order for quick matching */
+    hash: string;
+}
+/**
+ * Compute a deterministic hash from an array of header names.
+ *
+ * The function lowercases every header name, joins them with commas, and returns
+ * the first 16 hex characters of the SHA-256 digest. This gives 64 bits of entropy
+ * which is sufficient for matching against a small dictionary.
+ *
+ * @param headers - Array of header names in observed order
+ * @returns 16-character hex hash string
+ */
+export declare function computeHeaderOrderHash(headers: string[]): string;
+export declare const HEADER_ORDER_SIGNATURES: HeaderOrderSignature[];
+//# sourceMappingURL=header-order.d.ts.map

package/dist/data/header-order.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"header-order.d.ts","sourceRoot":"","sources":["../../src/data/header-order.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAIhE;AAED,eAAO,MAAM,uBAAuB,EAAE,oBAAoB,EAuJzD,CAAC"}