SilentSniffer - A professional, high-fidelity de-anonymization and

项目说明

<di="center">

SilentSniffer

*Educational Research & Web Security Diagnostic Sandbox*

![License: MIT]()
![De-9d00ff.s=flat-square)]()
![Live Demo]()

Engineered by Ahmad Hassan (B-Ted)

---

> [!NOTE]
> Browser Privacy & Awareness Notice: Modern web applications operate under the widespread assumption that browsing is inherently safe, private, and isolated by default. SilentSniffer is built to challenge this false sense of security. Operating strictly as a self-contained, client-side sandbox, zero data is exported or transmitted anywhere. Instead, it offers a real-time, demonstration of just how much ambient device state, hardware telemetry, and beha data can slip out of a user's control without explicit consent—simply because modern browser specifications permit it by default.
</div>

💡 The Philosophy Behind SilentSniffer

Most internet users assume that unless they explicitly click "Allow" on a browser permission prompt, their session remains private and contained. In reality, standard Web APIs grant websites extensi to hardware characteristics, timing , network topologies, and sensor behaviors silently under the hood.

SilentSniffer was created as an educational eye-opener. By running diagnostic and demonstration modules in a completely safe, local-only sandbox en, users can grasp the true surface area of web exposure permitted by modern browsers—without any risk of data leaving their device.

---

🏗 Architecture O

The toolkit is built on a Zero-Coupling Dynamic Plugin Architecture. The core engine remains entirely agnostic of indi module logic, disco and loading tools at runtime via a centralized manifest.

Key Design Principles:

---

⚡ Threat Escalation Hierarchy

Tools are categorized into six distinct levels, reflecting the se of information exposure.

| Level | Classification | | Focus Area | Sandbox Behavior |
| :--- | :--- | :--- | :--- | :--- |
| L1 | Standard Recon | 🟢 Green | OS, Browser, and Performance Telemetry | Local Diagnostic Queries |
| L2 | Ad Profiling | 🟡 Yellow | Network Topology & Hardware Fingerprinting | Local Diagnostic Queries |
| L3 | Critical Intelligence | 🔴 Red | PII, Storage Metadata, and Web APIs | Local Diagnostic Queries |
| L4 | High-Fidelity HW Exploits | 🟣 Purple | Hardware Silicon & Audio Fingerprinting | Local Diagnostic Queries |
| L5 | Weaponized | 🖤 Black | Acti Demonstrations (Keyloggers, MitM, Formjacking) | Sandboxed Local Feedback |
| L6 | Social Engineering & Phishing | 🔥 Crimson | Phishing Kits, OAuth Hijacking, Sensor Captures | Sandboxed Local Feedback |

---

🔒 Security & Local Execution Scope

This framework is maintained strictly for educational research, awareness, and browser capability auditing. All 54 modules across Levels 1 through 6 run strictly within your browser. Remote exfiltration servers and malicious payloads are excluded; all captured metrics and feedback remain strictly local to your machine.

> 📖 Detailed Technical Specification: For a complete list of excluded offensi signatures, , and their safe diagnostic replacements, view the Excluded Specification Document.

Component Implementation Specification:

All UI components, registration manifests, core infrastructure engines (transmitter.js, persistence.js, e.js), and 54 diagnostic modules are 100% complete and operational in a sandboxed capacity:

| Level | Component / Module File | Diagnostic / Demonstration Focus | Execution Scope |
| :--- | :--- | :--- | :--- |
| Core | src/core/transmitter.js | Local IndexedDB audit dispatch | Local Auditor |
| Core | src/core/persistence.js | Storage Persistence API check | Local Auditor |
| Core | src/core/e.js | Automation indicator detection | Local Auditor |
| L1 | protocol_handler_scan.js | Protocol Handler API audit | Local Auditor |
| L1 | display_metrics.js | Color depth & accessibility queries | Local Auditor |
| L2 | dns_prefetch_scan.js | DNS prefetch & timing entry audit | Local Auditor |
| L2 | bluetooth_probe.js | Web Bluetooth API a | Local Auditor |
| L2 | usb_probe.js | WebUSB device authorization audit | Local Auditor |
| L2 | network_info_audit.js | NetworkInformation API audit | Local Auditor |
| L2 | xr_de.js | WebXR Device API audit | Local Auditor |
| L3 | autofill_harvest.js | HTML5 autocomplete attribute check | Local Auditor |
| L3 | credential_phish.js | Secure context & Credential API check | Local Auditor |
| L3 | session_hijack.js | Storage state & cookie enabled check | Local Auditor |
| L3 | history_sniff.js | History API stack & scroll state | Local Auditor |
| L3 | indexeddb_raid.js | Origin IndexedDB database list | Local Auditor |
| L3 | cache_exfil.js | Cache Storage bucket in | Local Auditor |
| L4 | port_scanner.js | WebSockets, Fetch & Beacon check | Local Auditor |
| L4 | ser.js | Ser registration audit | Local Auditor |
| L4 | webgl_shader_exploit.js | GLSL shader precision bits query | Local Auditor |
| L4 | timing_oracle.js | Precision timer & isolation audit | Local Auditor |
| L4 | spectre_probe.js | COOP/COEP & SharedArrayBuffer check | Local Auditor |
| L4 | codecs_audit.js | WebCodecs API support audit | Local Auditor |
| L4 | worker_channel_audit.js | Worker channel messaging audit | Local Auditor |
| L5 | dns_rebinding.js | Origin & document.domain boundary | Local Auditor |
| L5 | clickjack_engine.js | Window framing state (top !== self) | Local Auditor |
| L5 | pastejack.js | Clipboard API permissions query | Local Auditor |
| L5 | cache_poison_attack.js | CacheStorage API origin check | Local Auditor |
| L5 | tab_napping.js | Page API status | Local Auditor |
| L5 | keylogger.js | Keyboard Layout API query | Local Auditor |
| L5 | formjack.js | HTMLFormElement requestSubmit check | Local Auditor |
| L5 | crypto_miner.js | WebAssembly & core count | Local Auditor |
| L6 | notification_phish.js | Notification API permission state | Local Auditor |
| L6 | oauth_hijack.js | Window popup interface check | Local Auditor |
| L6 | download_drive_by.js | Anchor download attribute check | Local Auditor |
| L6 | permission_abuse.js | Multi-sensor Permissions API query | Local Auditor |
| L6 | screen_capture.js | Display Media API support check | Local Auditor |
| L6 | camera_capture.js | UserMedia API constraint check | Local Auditor |

All diagnostic queries execute strictly in the local browser context and store execution data in an isolated local IndexedDB (SilentSnifferAuditLogDB). No data e the user's browser.

---

🔄 System Workflow & Data Flow

When a module is executed, it follows a strict lifecycle from initialization to local rendering.

---

📁 Repository Structure

---

🛠 Internal Module Structure

Every module adheres to a unified interface to ensure clean execution within the dynamic sandbox.

<details>
<summary><b>View Module Template (Ja)</b></summary>

</details>

---

🤝 De & Contribution

The repository is maintained with a focus on web security education and research. Contributors are welcome to expand the toolkit by implementing new browser capability auditors.

1. Draft: Implement the diagnostic module using the standard template.
2. Locate: Place the script in the corresponding src/modules/levelX/ folder.
3. Register: Add the file path to src/config/modules.json.
4. : Open debug.html to confirm the tool is automatically rendered and functional.

---

<di="center">
<br />
_{<b>De & Documented by Ahmad Hassan (B-Ted)</b>}
<br />
^{Maintained for Cybersecurity Awareness, Web API Research & Education}
</div>

项目信息

开发语言：JavaScript

Star 数：219

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。