10

There is no single fingerprinting method. But assuming that the fingerprinting you fear tries to be as granular as possible it will not only include easily fakeable things like User-Agent header but will also include things like font rendering, canvas performance etc - see here for some extensive but still incomplete and somewhat outdated list of ways to ...


5

Passive fingerprinting can easily be faked, and it is trivial to code responses that can pass passive fingerprinting. And yet, it can still work because not every bot includes this feature because not every target fingerprints. It's a pure cost/benefit scenario. Active fingerprinting takes more complex coding to spoof, and not all bots have the facility (...


4

There are no explicit APIs to enumerate the browser extensions. But this does not mean they are not detectable or that they cannot be included in the fingerprint even if the specific extension is not detected. Browser extensions usually serve a purpose and this purpose can cause side effects, like manipulating the DOM (remove ads, change visual ...


2

While there's never been a list of installed extensions available to the site's code, years ago the browser provided an inerrable list of "plugins" called navigator.plugins. These aren't exactly the same as extensions as it's an older technology (eg. shockwave, quicktime, pdf), but some extensions added plugins to the list, and people often confuse ...


1

It fails because of Basic Auth (ie "Connection Refused") ... I think you are missing concepts: "Connection refused" means that establishing a TCP connection to the server has failed. This has nothing to do with Basic Authentication which happens only after a successful TCP connection could be established. With Basic Authentication required the server ...


1

As the other answer has pointed out, emulating another architecture tends to be slow. This would tip off a would-be attacker there's something going on by short and simple code that tests execution timings. Beyond installing a virtual machine with all the defaults selected, you could fake the processor and motherboard information. This again wouldn't hold ...


1

You are assuming that distinguishing yourself from the others will only be done if Javascript is enabled. But, assuming that all but you have Javascript enabled , exactly disabling Javascript might result (depending on the site you visit) in a behavior which is clearly different from the other users. Apart from that there are HTML features like responsive ...


1

Fingerprinting is a cat and mouse game. Trackers are always finding new undocumented features that respond differently on each system, and browser makers always closing them as soon as they can. That's the "quickly becoming obsolete" part. That means it does not work anymore? Not at all. It's that older fingerprinting tricks (those ancient ones ...


1

If you are only doing network analysis and not using any IDS systems with signatures, one thing that would be observed is the traffic going between the hosts where that isn’t normal to see. Hosts don’t generally communicate to each other on a large enterprise network, host to server yes, not host to host. So with knowledge of the tool ports and protocols, ...


1

User tracking is typically done at the level of the browser and not the OS. Insofar it will not help to use a browser in a virtual machine, as long as it is always the same browser.


1

You could use the nmap smb-os-discovery.nse script it should for the most part give you the right answers. It doesn't work on some versions of windows 10 though. nmap --script smb-os-discovery.nse -p445 127.0.0.1


Only top voted, non community-wiki answers of a minimum length are eligible