reconfavicon - Advanced Favicon Reconnaissance Tool

Languages used

reconfavicon is an advanced Favicon Investigation Toolkit designed to analyze and gather information about website favicons.

version - 2024

Table of Contents

• About
• Features
• Getting Started
  • Installation
  • Caution
• Usage
• Uninstall
• License
• Contributing

😎 About

reconfavicon is a powerful tool for investigating website favicons. It extracts and analyzes favicon data, including MD5 and MMH3 hashes. The tool allows searching for these hashes in online databases and provides queries for Shodan and ZoomEye to further investigate websites using these favicons.

💯 Features

🚀 🥵 Extract MD5 and MMH3 hashes of favicons

🔥 👀 Search for favicon hashes in online databases

🔐 🔑 Generate queries for Shodan and ZoomEye

🥳 🎊 Multiple url support via files, generates mmh3 and md5 hashes for now (no analysis)

🎉 🚀 Faster execution via multi-threading

Getting Started

🚀 Installation

• One line install command

  curl -sL https://raw.githubusercontent.com/sumanrox/reconfavicon/main/install.sh | sudo bash
  

• Make an alias (zsh)

  # Create alias in ~/.zshrc or inside ~/.bashrc
  alias reconfavicon="python3 /opt/reconfavicon/reconfavicon.py"
  

• Source it

  source ~/.zshrc
  # Or
  source ~/.bashrc
  

⚠️ Caution

• The installer makes /var/opt/reconfavicon/shared folder writeable for everyone
• You may want to take the ownership rather than giving it root privileges

• Remedy

  sudo chown -R $(whoami) /opt/reconfavicon
  chmod 700 /opt/reconfavicon/shared
  

📡 Usage

• For doing recon on single target

  reconfavicon -u https://example.com
  

• For doing recon on multiple targets, (Generates a CSV File)

  reconfavicon -f urls.txt
  

• More parameters

    -h, --help            show this help message and exit
    --url URL, -u URL     Server URL or IP, eg : http://example.com
    --port PORT, -p PORT  Server Port, eg: 8080
    --no-banner, -n       Prevents the Banner from loading
    --file URLLISTS, -f URLLISTS
                          File containing list of urls, fetches only hashes, will ignore other switches
    --threads THREADS, -t THREADS
                          Used with -f switch, will ignore other switches # (Default 20 Threads)
    --update, -up         Update Lookup Table
  

🚧 Uninstall

• Very simple uninstallation process

  sudo rm /usr/local/bin/reconfavicon -rf
  

• Remove the alias from bashrc

  alias reconfavicon="python3 /usr/local/bin/reconfavicon/reconfavicon.py"
  

🏗️ Contributing

Contributions are welcome! If you have any improvements or suggestions, feel free to open an issue or create a pull request.

🪪 License

This project is licensed under the MIT License

Made with ❤️ by Suman Roy