โ„น๏ธFavicon OSINT

Favicon recon for Bug Bounties and Pentests

#Tools FavFreak , extract facicons from a list of target URLs

git clone https://github.com/devanshbatham/FavFreak.git 
cat http.txt | python3 favfreak.py

---
Murmurhash , similar tool with single url functionality

git clone https://github.com/Viralmaniar/MurMurHash.git
cd MurMurHash
pip install -r requirements.txt
python MurMurHash.py

---

Manual

curl -s -L -k https://test.favicon.ico | python3 -c 'import mmh3,sys,codecs;print(mmh3.hash(codecs.encode(sys.stdin.buffer.read(),"base64")))'

---

Use Fofa for quick check then feed to Shodan --> http.html_hash:12345678

Last updated