domains / families / security / tls-fingerprint-impersonation

tls-fingerprint-impersonation

separate

Spoof TLS ClientHello and JA4 fingerprints for browser impersonation.

When to use

Target returns 403/blocked on curl/httpx even with correct User-Agent headers.
Cloudflare or Akamai is fingerprinting TLS ClientHello (JA3/JA4 mismatch with browser).
API probing requires mobile-app impersonation (OkHttp fingerprint for Android).
Need high-throughput HTTP requests that pass TLS fingerprint checks without running a full browser.
Target shows different behavior based on TLS fingerprint (mobile vs desktop endpoints).

Repository	Path
uphiago/recon-skills	`recon/tls-fingerprint-impersonation/SKILL.md`