Spoof System Fingerprints

Leorion

Leorion

Newbie
Joined
Oct 29, 2019
Messages
21
Reaction score
0
Hello.

Recently I noticed that even Multilogin App like Jarvee were not able to spoof or change System Fingerprints.
Please take a Look at the Battery Percentage in the screenshot, that is noticeable with Jarvee Embedded Browser.

SsZtyiQc

Thus, even with different User agents, Twitter, Instagram or any other website can be able to notice that I'm still the same user.

So there is my question : Is there any way (software or tricks) to Spoof or replace System Datas of the Device I'm using in order to make them not recognizable each time by Websites Or social Medias ? (A bit like ID, IMEI,... changer Apps on Android Phones)

I'm not talking about User-Agent, but System Fingerprints.
There is the website I use to see those System Datas : https://www.hotcleaner.com/clickclean-app.html

Huge thanks
 
Advertise on BHW
THAT explain a lot. Didn't know that, so thanks for sharing this
Can't give you a solution. But it'll be nice if someone know something about that

I'll follow this
 
You need to override the javascript call that gets that information and return what you want to return.
 
Unless your on the same proxy, battery % is not an accurate way of detecting people.

If you had that paired with other metrics (is RAM etc spoofed?) then yeah it's pretty easy to start matching people up.
 
rootjazz said:
You need to override the javascript call that gets that information and return what you want to return.
Click to expand...
Thank you, but how can I do that ? I'm a noob at Javascript. If you can explain how to do that, It'll be awesome.

Huge thanks again
 
Leorion said:
Thank you, but how can I do that ? I'm a noob at Javascript. If you can explain how to do that, It'll be awesome.

Huge thanks again
Click to expand...

You need to inject the javascript into the page to run which will modify the navigator properties so when the page JS (if it does at all) calls the navigator.getbattery() it returns your code / function / data. The only way for you to do that would be to use a network sniffer / MITM program that sits between the browser and server and can inject your scripts in.

But as the post above says, I doubt very much that the battery is being used.
 
I think that the battery isn't the only way to detect someone. Indeed, the site was also able to detect other datas from my PC like processor, etc...

Is there a way to see which JS calls have been done by a Website? This way I'll be able to overide those, as you said before ? You look like you know what you are talking about.
Is this the method you personnaly use to leave the less fingerpints behind you ?

Thanks for your reply, once again.
 
Leorion said:
I think that the battery isn't the only way to detect someone. Indeed, the site was also able to detect other datas from my PC like processor, etc...

Is there a way to see which JS calls have been done by a Website? This way I'll be able to overide those, as you said before ?
Click to expand...

there is, but it would be an extension / plugin and I cannot for the life of me remember the name. When I do I will let you know.

Just to add what I said above about using a MITM to inject the script to the page before the sites code runs, there is another way but probably not open to you if you are using someone elses software, you can (well they can) use a webextension which will process your JS code before the sites. But I don't think that method is available to you in this instance


Is this the method you personnaly use to leave the less fingerpints behind you ?

Thanks for your reply, once again.
Click to expand...
yes (although hadn't thought of the battery) it is the only way if using a single machine for multiple accounts. Well I suppose you could install plugins that randomises this data, but it is basically the same thing
 
Leorion said:
I think that the battery isn't the only way to detect someone. Indeed, the site was also able to detect other datas from my PC like processor, etc...
.
Click to expand...

Probably you know, but it is called "browser fingerprinting".

Have a search around and you can find many ways they can identify the same actual machine is used when is supposed to be unique.

The biggest one is going to be webgl / canvas fingering that does some drawing then gets a hash of the image which is fairly unique. Again, it is mitigatable but the most complex
 
rootjazz said:
there is, but it would be an extension / plugin and I cannot for the life of me remember the name. When I do I will let you know.

Just to add what I said above about using a MITM to inject the script to the page before the sites code runs, there is another way but probably not open to you if you are using someone elses software, you can (well they can) use a webextension which will process your JS code before the sites. But I don't think that method is available to you in this instance



yes (although hadn't thought of the battery) it is the only way if using a single machine for multiple accounts. Well I suppose you could install plugins that randomises this data, but it is basically the same thing
Click to expand...

Thanks so much for all those useful informations :) I'll take them an account in the future, for sure.
By the way. I want to let you know how suprised I was when I saw that you were the creator of a Twitter Bot too. Maybe this is not the place to discuss of this, but It's more or less related to Fingerprints with Social Media's Botting.

Thus, may I ask you if your Bot is not letting fingerprints as Jarvee does ? If Twitter can not flag (Recapcha, PV) all the accounts in the same time with a High quality 4G connexion ? By this, I mean almost all we just discussed above.

Very surprised, but in a really good way. Hope I'll have your answer as soon a possible.
 
Sorry, but BHW do not let anyone promote / discuss their products outside BST threads. You can contact me directly, email / pm if you want
 
Your approach is wrong OP when it comes to spoofing/fingerprinting. Lets say we have website X, firstly you shold take a look verify what info this website is taking a look, than spoof it. Trying to spoof something (lets say battery percentage) before checking if its required to do that is pointless. In this way you can spoof things that not needed for given website and forget about something given website is actually checking.
 
satyr85 said:
Your approach is wrong OP when it comes to spoofing/fingerprinting. Lets say we have website X, firstly you shold take a look verify what info this website is taking a look, than spoof it. Trying to spoof something (lets say battery percentage) before checking if its required to do that is pointless. In this way you can spoof things that not needed for given website and forget about something given website is actually checking.
Click to expand...
Very true, however, the site is not static and will change improve, if you only spoof exactly what is wanted, you may get caught out in future, so is a good idea to keep your finger on the pulse of browser fingerprinting and implement most things to future proof yourself somewhat
 
rootjazz said:
You need to inject the javascript into the page to run which will modify the navigator properties so when the page JS (if it does at all) calls the navigator.getbattery() it returns your code / function / data. The only way for you to do that would be to use a network sniffer / MITM program that sits between the browser and server and can inject your scripts in.

But as the post above says, I doubt very much that the battery is being used.
Click to expand...

Eventhough if you override the function the problem is that you can still check wether the function used is native or not
 
You can add some noise when the website makes a call to the finger print
I noticed that too
Or you need to invest in multilogin on black Friday
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top