OP 10 January, 2022 - 07:27 PM
(This post was last modified: 10 January, 2022 - 07:27 PM by LoroPiana. Edited 1 time in total.)
You can use this tool when it comes to recon, using Favicon hashes. It takes a list of urls (with https or http protocol) from stdin ,then it fetches favicon.ico and calculates its hash value. It sorts the domains/subdomains/IPs according to their favicon hashes and the most interesting part is , It matches calculated favicon hashes with the favicon hashes present in the fingerprint dictionary , If matched then it will show you the results in the output, there is option to generate shodan dorks as well (that is pretty basic and you can do it manually as well)
“The lesser known art of Recon using Favicon hashes”
useful resource imo
“The lesser known art of Recon using Favicon hashes”
useful resource imo
