From 6d0ebf5d157b7a6632ed08c28472a8703a62ea56 Mon Sep 17 00:00:00 2001 From: mcoder Date: Fri, 17 Apr 2026 21:22:00 +0330 Subject: [PATCH] Add --- resources/views/hacker/fingerprint.blade.php | 131 +++++++++++++++++++ resources/views/user/lab-directory.blade.php | 9 ++ routes/web.php | 7 +- 3 files changed, 146 insertions(+), 1 deletion(-) create mode 100644 resources/views/hacker/fingerprint.blade.php diff --git a/resources/views/hacker/fingerprint.blade.php b/resources/views/hacker/fingerprint.blade.php new file mode 100644 index 0000000..e90429e --- /dev/null +++ b/resources/views/hacker/fingerprint.blade.php @@ -0,0 +1,131 @@ + + + + + + Canvas Fingerprinting Lab + + + + + +
+ +
+

Canvas Fingerprinting

+

Tracking users without cookies or IP addresses via GPU rendering anomalies.

+
+ +
+ + +
+
+ +

+ + Generated Hardware ID +

+ +
+ Your Unique Signature + Calculating... +
+ +

Hidden Rendering Canvas:

+
+ + +
+

+ * The canvas forces your OS and GPU to render anti-aliased text. Slight micro-pixel variations create the unique hash above. +

+
+ + +
+

+ + Security Researcher Notes +

+ +
+

+ Why this works: Every combination of Operating System, GPU, Graphics Driver, and Font installation renders complex text slightly differently at the sub-pixel level. +

+

+ The Threat: Even if a user clears their cookies, uses a VPN to hide their IP, or browses in "Incognito/Private" mode, their Hardware Fingerprint ID will likely remain exactly the same. This allows ad networks (and attackers) to track users persistently across the web. +

+
+

🛡️ Mitigation via Zero Trust (RBI):

+

+ Zero Trust and Remote Browser Isolation (RBI) solutions defeat canvas fingerprinting. Because the website is rendered inside a disposable cloud container (e.g., a Linux Docker container), the script fingerprints the cloud server's virtual GPU and OS, not the actual user's device. Consequently, thousands of users connecting through the RBI will share the exact same generic cloud fingerprint, providing "security through anonymity." +

+
+
+
+ +
+
+ + + + + + + 🏠 Back to Lab Directory + + + + \ No newline at end of file diff --git a/resources/views/user/lab-directory.blade.php b/resources/views/user/lab-directory.blade.php index fc74cc2..a2abc1e 100644 --- a/resources/views/user/lab-directory.blade.php +++ b/resources/views/user/lab-directory.blade.php @@ -108,6 +108,15 @@ Launch Lab + + +
+
+

Canvas Fingerprinting

+

Demonstrate how browsers leak unique hardware and rendering signatures for tracking.

+ Launch Lab +
+
diff --git a/routes/web.php b/routes/web.php index dcee013..0c98b98 100644 --- a/routes/web.php +++ b/routes/web.php @@ -69,6 +69,11 @@ return view('hacker.webrtc'); })->name('hacker.webrtc'); + // Canvas Fingerprinting Exploit Page + Route::get('/fingerprint', function () { + return view('hacker.fingerprint'); + })->name('hacker.fingerprint'); + }); /* @@ -140,4 +145,4 @@ // (فضای خالی برای حملات بعدی مثل Phishing، MITB و ...) }); -}); +}); \ No newline at end of file