tashuuuu / favirecon

Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

favirecon

Use favicon.ico to improve your target recon phase

Coded with 💙 by edoardottt

Share on Twitter!

Install • Get Started • Examples • Changelog • Contributing • License

Note This tool heavily relies on its favicon hash database. If you think you have a new favicon hash that's worth adding or you think there is a wrong hash-service association please open an issue.

Install 📡

Using Snap

sudo snap install favirecon

Using Go

go install github.com/edoardottt/favirecon/cmd/favirecon@latest

Get Started 🎉

Usage:
  favirecon [flags]

Flags:
INPUT:
   -u, -url string   Input domain
   -l, -list string  File containing input domains
   -cidr             Interpret input as CIDR

CONFIGURATIONS:
   -hash string[]        Filter results having these favicon hashes (comma separated)
   -c, -concurrency int  Concurrency level (default 50)
   -t, -timeout int      Connection timeout in seconds (default 10)

OUTPUT:
   -o, -output string  File to write output results
   -v, -verbose        Verbose output
   -s, -silent         Silent output. Print only results

Examples 💡

Identify a single domain

favirecon -u https://www.github.com

echo https://www.github.com | favirecon

Grab all possible results from a list of domains (protocols needed!)

favirecon -l targets.txt

cat targets.txt | favirecon

Grab all possible results belonging to a specific target(s) (protocols needed!)

cat targets.txt | favirecon -hash 708578229

Grab all possible results from single CIDR

favirecon -u 192.168.1.0/24 -cidr

Changelog 📌

Detailed changes for each release are documented in the release notes.

Contributing 🛠

Just open an issue / pull request.

Before opening a pull request, download golangci-lint and run

golangci-lint run

If there aren't errors, go ahead :)

In the news 📰

• Hive Five Newsletter by Securibee

License 📝

This repository is under MIT License.
edoardoottavianelli.it to contact me.