HTTP-Basma

Series

HTTP-Basma

All about HTTP-Basma (https://httpbasma.netomize.ca), a novel active HTTP fingerprinting algorithm.

Clustering macOS ClickFix Campaign Webpages Using the HTTP-Basma Fingerprinting Algorithm
Introduction On August 5, 2026, the Microsoft Security Research Team (MSRT) blogged about a new macOS ClickFix campaign titled From open lures to cloaked gates: How a macOS ClickFix campaign learned t
Aug 6, 20263 min read45
HTTP-Basma - Clustering Verbosus Fingerprints
The design and architecture of the verbosus fingerprint (vfp) in HTTP-Basma allows for deeper inspection of every field of every probe. The reversibility property of the fingerprint coupled with the d
Jul 14, 20268 min read53
HTTP Status-Line (SL) Shenanigans
While working on HTTP-Basma, I had the idea of trying to construct "weird" (obfuscated looking) yet functional HTTP server response headers, that are still interpreted by the browser as valid server r
Jun 30, 20263 min read29
HTTP-Basma - Platform Update (v3.0 - Gaudi)
Following the first release of HTTP-Basma on May 20, 2026, on Netomize's official GitHub repository, including the research paper, source code, datasets, and 64-bit release versions for Windows and Li
Jun 10, 20263 min read28
Introducing HTTP-Basma - Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation
Netomize is happy to announce the release of a new HTTP fingerprinting algorithm called HTTP-Basma to identify HTTP servers using a reversible fingerprint codenamed verbosus. In the realm of cybersecu
May 20, 20262 min read29