In this tutorial we'll discuss how to change Windows fingerprint.
We have following topics to discover:
What is a device fingerprint
What does a browser fingerprint collects
How to avoid such identification
What is a canvas fingerprint
How to avoid canvas fingerprinting
How To Spoof System Fingerprint
How To Spoof Font Fingerprint
WHAT IS A DEVICE OR BROWSER FINGERPRINT?
A device fingerprint or machine fingerprint is information collected about the software and hardware of a remote computing device for the purpose of identification.
The information is usually assimilated into a brief identifier using a fingerprinting algorithm.
A browser fingerprint is information collected specifically by interaction with the web browser of the device.
What does a browser fingerprint collects?
In fraud business people take care about browser fingerprint and use cool Anti-Fingerprint browsers like GoLogin, Sphere and so on.
Most people need this for example for cookies importing, botnet logs, cashout actions and so on.
A browser fingerprint provides :
Browser Information (Which Browser, Which Browser Version)
Browser Extensions (Does the user have anti fingerprint extensions?)
HTTP Headers
User-Agent (Maybe OS information if not spoofed?)
Hardware Properties (System Hardware Info, Phone Model, Operating System, Screensize)
Browsing History
Font metrics
Canvas and WebGL (Canvas is a html5 element which is used by WebHL render 2d and 3d graphics in browser to get information about graphics driver, graphics card or graphics processing unit (GPU)
Hardware Benchmarking
IP Address
Client Timezone
Silverlight Data
List of mime-types
Timestamp
How To Avoid Such Idenfitication?
For privacy it's very important to spoof such a fingerprint.
For example the brave browser does that since 2020.
To avoid much more fingerprint tests, you should block client-side scripts by using NoScript.
There are some scripts like FingerprintJS, imprintJS or CreepJS which are open source, these are mostly used by companies to make a profile of you.
You can also use different browsers to have multiple fingerprints.
An alternative option is, to use also remote desktops without touching your own browsers.
The last method would be, to create virtual machines for different reasons like personal life, fraud, pentest and so on.
What is a canvas fingerprint ?
Canvas fingerprinting is one of a number of browser fingerprinting techniques for tracking online users that allow websites to identify and track visitors using the HTML5 canvas element instead of browser cookies or other similar means.
How to avoid canvas fingerprinting ?
To avoid canvas fingerprint you can install the add-on 'Canvas Defender':
Firefox : https://addons.mozilla.org/en-US/firefox/addon/no-canvas-fingerprinting/
Chrome : https://chrome.google.com/webstore/detail/canvas-defender/obdbgnebcljmgkoljcdddaopadkifnpm
Install the add-on
Click on the add-on and select "Generate new noise"
Finally check if you can change your canvas correctly, visit : https://browserleaks.com/canvas
How To Spoof A System Fingerprint ?
To spoof a system fingerprint i have found some cool python scripts compressed into one repository.
In this case we use AntiOS.
AntiOS write on their repository that the tool changes window and hardware identifiers.
We need python installed on our system.
Visit https://github.com/vektort13/AntiOS
Download the zip file.
To run the main tool write :
py generate_fingerprint.py --help
Open CMD as admin and navigate with cd to your AntiOS folder which you had extracted.
The tool change following identificators :
Username
Hostname
Current windows build
Current windows build number
Windows build lab
BuildLabEx
BuildGuid
CryptoMachineGuid
DeviceGuid
CKCL Guid
HardwareProfileGuid
WMIGuid
EDGE Guid
InstallDate
ProductID
WindowsUpdateClientID
IE ProductID
IE KBNumber
IE Install date
VolumeID
MACadress
HardwareGUID
Changing windows telemetries:
py generate_fingerprint --telemetry
To change network identificators:
py generate_fingerprint --network
To change other system idenficators :
py generate_fingerprint --system
To change windows hardware :
py generate_fingerprint --hardware
You can also run
py generate_fingerprint
Then the script run and change everything.
How to change fonts fingerprinting ?
First of all open a cmd as administator.
Type :
cd %HOMEPATH%\Desktop
Download the tool:
curl -LO https://github.com/vektort13/AntiFontFingerprint/archive/refs/heads/master.zip
After this command you have the ZIP file on your Desktop, extract it.
cd AntiFontFingerprint-master
The Script moves several of your installed fonts into the hidden key - after that, the font fingerprint will be changed.
Next time these fonts will be placed back, so that to be replaced with other fonts.
This way you can change your font fingerprint without deleting your actual fonts.
If you placed to Hidden any fonts you need for work, just run the script with --recover-only command-line parameter will place all hidden fonts back.
You can use the script by typing :
py font_fingerprint <Number>
Replace the number with the count of fonts you want to move to hidden key. The minimum is 1 and the maximum is 64.
py font_fingerprint 30
You need to run this script as ADMIN.
Sources :
FingerprintJS Source Code : https://github.com/fingerprintjs/fingerprintjs
imprintJS Source Code : https://github.com/fingerprintjs/fingerprintjs
CreepJS Source Code : https://github.com/abrahamjuliot/creepjs
ClientJS Source Code : https://github.com/fingerprintjs/fingerprintjs
Browser Fingerprint Protector (Chrome): https://chrome.google.com/webstore/detail/browser-fingerprint-prote/kcklikpoajnpdpjgamjfepagpdkhahpn
Browser Fingerprint Protector (Firefox) : https://addons.mozilla.org/en-CA/firefox/addon/browser-fingerprint-protector/
Fingerprint Spoofer (Firefox) : https://addons.mozilla.org/en-CA/firefox/addon/chameleon-ext
Fingerprint Spoofer (Chrome) : https://chrome.google.com/webstore/detail/fingerprint-spoofing/ljdekjlhpjggcjblfgpijbkmpihjfkni
Font Fingerprint Defender (Firefox) : https://addons.mozilla.org/en-US/firefox/addon/font-fingerprint-defender/
Font Fingerprint Defender (Chrome) : https://chrome.google.com/webstore/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke
Audio Fingerprint Defender (Firefox) : https://addons.mozilla.org/en-US/firefox/addon/audioctx-fingerprint-defender/
Audio Fingerprint Defender (Chrome) : https://chrome.google.com/webstore/detail/audiocontext-fingerprint/pcbjiidheaempljdefbdplebgdgpjcbe
THIS EXTENSION IS FOR ANTI FINGERPRINTING
CyDec Security Anti-FP (Chrome) : https://chrome.google.com/webstore/detail/cydec-security-anti-fp/becfjfjckdhngmmpkhakoknnkgpgfelk
CyDec Security Anti-FP (Firefox): https://addons.mozilla.org/en-US/firefox/addon/cydec-security-antifingerprint/
We have following topics to discover:
What is a device fingerprintWhat does a browser fingerprint collectsHow to avoid such identificationWhat is a canvas fingerprintHow to avoid canvas fingerprintingHow To Spoof System FingerprintHow To Spoof Font FingerprintWHAT IS A DEVICE OR BROWSER FINGERPRINT?
A device fingerprint or machine fingerprint is information collected about the software and hardware of a remote computing device for the purpose of identification.
The information is usually assimilated into a brief identifier using a fingerprinting algorithm.
A browser fingerprint is information collected specifically by interaction with the web browser of the device.
What does a browser fingerprint collects?
In fraud business people take care about browser fingerprint and use cool Anti-Fingerprint browsers like GoLogin, Sphere and so on.
Most people need this for example for cookies importing, botnet logs, cashout actions and so on.
A browser fingerprint provides :
Browser Information (Which Browser, Which Browser Version) Browser Extensions (Does the user have anti fingerprint extensions?)HTTP Headers User-Agent (Maybe OS information if not spoofed?)Hardware Properties (System Hardware Info, Phone Model, Operating System, Screensize)Browsing History Font metrics Canvas and WebGL (Canvas is a html5 element which is used by WebHL render 2d and 3d graphics in browser to get information about graphics driver, graphics card or graphics processing unit (GPU)Hardware BenchmarkingIP AddressClient TimezoneSilverlight DataList of mime-typesTimestampHow To Avoid Such Idenfitication?
For privacy it's very important to spoof such a fingerprint.
For example the brave browser does that since 2020.
To avoid much more fingerprint tests, you should block client-side scripts by using NoScript.
There are some scripts like FingerprintJS, imprintJS or CreepJS which are open source, these are mostly used by companies to make a profile of you.
You can also use different browsers to have multiple fingerprints.
An alternative option is, to use also remote desktops without touching your own browsers.
The last method would be, to create virtual machines for different reasons like personal life, fraud, pentest and so on.
What is a canvas fingerprint ?
Canvas fingerprinting is one of a number of browser fingerprinting techniques for tracking online users that allow websites to identify and track visitors using the HTML5 canvas element instead of browser cookies or other similar means.
How to avoid canvas fingerprinting ?
To avoid canvas fingerprint you can install the add-on 'Canvas Defender':
Firefox : https://addons.mozilla.org/en-US/firefox/addon/no-canvas-fingerprinting/
Chrome : https://chrome.google.com/webstore/detail/canvas-defender/obdbgnebcljmgkoljcdddaopadkifnpm
Install the add-on Click on the add-on and select "Generate new noise" Finally check if you can change your canvas correctly, visit : https://browserleaks.com/canvasHow To Spoof A System Fingerprint ?
To spoof a system fingerprint i have found some cool python scripts compressed into one repository.
In this case we use AntiOS.
AntiOS write on their repository that the tool changes window and hardware identifiers.
We need python installed on our system.
Visit https://github.com/vektort13/AntiOS
Download the zip file.
To run the main tool write :
py generate_fingerprint.py --help
Open CMD as admin and navigate with cd to your AntiOS folder which you had extracted.
The tool change following identificators :
UsernameHostnameCurrent windows buildCurrent windows build numberWindows build labBuildLabExBuildGuidCryptoMachineGuidDeviceGuidCKCL GuidHardwareProfileGuidWMIGuidEDGE GuidInstallDateProductIDWindowsUpdateClientIDIE ProductIDIE KBNumberIE Install dateVolumeIDMACadressHardwareGUIDChanging windows telemetries:
py generate_fingerprint --telemetry
To change network identificators:
py generate_fingerprint --network
To change other system idenficators :
py generate_fingerprint --system
To change windows hardware :
py generate_fingerprint --hardware
You can also run
py generate_fingerprint
Then the script run and change everything.
How to change fonts fingerprinting ?
First of all open a cmd as administator.
Type :
cd %HOMEPATH%\Desktop
Download the tool:
curl -LO https://github.com/vektort13/AntiFontFingerprint/archive/refs/heads/master.zip
After this command you have the ZIP file on your Desktop, extract it.
cd AntiFontFingerprint-master
The Script moves several of your installed fonts into the hidden key - after that, the font fingerprint will be changed.
Next time these fonts will be placed back, so that to be replaced with other fonts.
This way you can change your font fingerprint without deleting your actual fonts.
If you placed to Hidden any fonts you need for work, just run the script with --recover-only command-line parameter will place all hidden fonts back.
You can use the script by typing :
py font_fingerprint <Number>
Replace the number with the count of fonts you want to move to hidden key. The minimum is 1 and the maximum is 64.
py font_fingerprint 30
You need to run this script as ADMIN.
Sources :
FingerprintJS Source Code : https://github.com/fingerprintjs/fingerprintjs
imprintJS Source Code : https://github.com/fingerprintjs/fingerprintjs
CreepJS Source Code : https://github.com/abrahamjuliot/creepjs
ClientJS Source Code : https://github.com/fingerprintjs/fingerprintjs
Browser Fingerprint Protector (Chrome): https://chrome.google.com/webstore/detail/browser-fingerprint-prote/kcklikpoajnpdpjgamjfepagpdkhahpn
Browser Fingerprint Protector (Firefox) : https://addons.mozilla.org/en-CA/firefox/addon/browser-fingerprint-protector/
Fingerprint Spoofer (Firefox) : https://addons.mozilla.org/en-CA/firefox/addon/chameleon-ext
Fingerprint Spoofer (Chrome) : https://chrome.google.com/webstore/detail/fingerprint-spoofing/ljdekjlhpjggcjblfgpijbkmpihjfkni
Font Fingerprint Defender (Firefox) : https://addons.mozilla.org/en-US/firefox/addon/font-fingerprint-defender/
Font Fingerprint Defender (Chrome) : https://chrome.google.com/webstore/detail/font-fingerprint-defender/fhkphphbadjkepgfljndicmgdlndmoke
Audio Fingerprint Defender (Firefox) : https://addons.mozilla.org/en-US/firefox/addon/audioctx-fingerprint-defender/
Audio Fingerprint Defender (Chrome) : https://chrome.google.com/webstore/detail/audiocontext-fingerprint/pcbjiidheaempljdefbdplebgdgpjcbe
THIS EXTENSION IS FOR ANTI FINGERPRINTINGCyDec Security Anti-FP (Chrome) : https://chrome.google.com/webstore/detail/cydec-security-anti-fp/becfjfjckdhngmmpkhakoknnkgpgfelk
CyDec Security Anti-FP (Firefox): https://addons.mozilla.org/en-US/firefox/addon/cydec-security-antifingerprint/
