Browser Configuration Fingerprinting via JavaScript

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•3

This rule detects attempts to fingerprint a browser's configuration using JavaScript by looking for the presence of 'navigator.userAgent' and 'navigator.platform' within HTTP response data. This technique is often used during reconnaissance phases by attackers to gather information about a target's browser environment.