A Python utility to fetch a website’s favicon (or read a local favicon file) and compute its mmh3 hash.
This hash can be used for fingerprinting web applications and searching on reconnaissance platforms like Shodan, ZoomEye, FOFA, and Censys.
- Fetch favicon from a remote URL (
--url) - Compute hash from a local file (
--file) - Support for proxies (default:
http://127.0.0.1:8080) - Option to disable SSL verification (
--insecure) - Output queries for Shodan, FOFA, and Censys
- Select a specific engine with
--engine - Colorized output
- Automatically append
favicon.icoas required
Clone the repository and install dependencies:
# Clone locally
git clone https://github.com/pvaladares/favicon-hash.git
cd favicon-hash
# Optional - To isolate the environment from other tools
python3 -m venv venv
source venv/bin/activate # `deactivate` afterwards to exit the environment
# Install requirements
pip3 install -r requirements.txtpython3 favicon_hash.py --url https://www.google.compython3 favicon_hash.py --file ./favicon.icopython3 favicon_hash.py --url https://www.google.com/favicon.ico --proxypython3 favicon_hash.py --url https://www.google.com/favicon.ico --proxy http://myproxy:9090python3 favicon_hash.py --url https://self-signed.badssl.com --insecurepython3 favicon_hash.py --url https://google.com --engine shodan✔ Favicon hash for https://google.com/favicon.ico: 708578229
🔍 Example queries you can use:
Shodan: http.favicon.hash:708578229
Fofa: icon_hash="708578229"
Censys: services.http.response.favicons.shodan_hash:708578229