{"id":13585519,"url":"https://github.com/devanshbatham/FavFreak","last_synced_at":"2025-04-07T10:31:02.183Z","repository":{"id":44941727,"uuid":"276888008","full_name":"devanshbatham/FavFreak","owner":"devanshbatham","description":"Making Favicon.ico based Recon Great again ! ","archived":false,"fork":false,"pushed_at":"2023-08-29T16:38:07.000Z","size":112,"stargazers_count":1170,"open_issues_count":5,"forks_count":174,"subscribers_count":18,"default_branch":"master","last_synced_at":"2025-03-31T12:06:14.676Z","etag":null,"topics":["bugbounty","bughunting","hacking","information-gathering","osint","recon","reconnaissance","web-security","webappsec"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/devanshbatham.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2020-07-03T11:52:29.000Z","updated_at":"2025-03-31T10:52:02.000Z","dependencies_parsed_at":"2024-01-14T10:18:33.705Z","dependency_job_id":"26036d81-2e43-4713-9ce8-ee2ffbac66ad","html_url":"https://github.com/devanshbatham/FavFreak","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devanshbatham%2FFavFreak","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devanshbatham%2FFavFreak/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devanshbatham%2FFavFreak/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devanshbatham%2FFavFreak/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/devanshbatham","download_url":"https://codeload.github.com/devanshbatham/FavFreak/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247636068,"owners_count":20970855,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bugbounty","bughunting","hacking","information-gathering","osint","recon","reconnaissance","web-security","webappsec"],"created_at":"2024-08-01T15:04:59.428Z","updated_at":"2025-04-07T10:31:01.945Z","avatar_url":"https://github.com/devanshbatham.png","language":"Python","readme":"## FavFreak - Weaponizing favicon.ico for BugBounties , OSINT and what not\n\n![FacFreak](https://raw.githubusercontent.com/devanshbatham/FavFreak/master/static/logo.PNG)\n\n### Detailed Description about this can be found here : \nRead Blog here : https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139\n\n### Introduction \n\nI have created this tool for making my work easier when it comes to recon using Favicon hashes, it takes a list of urls (with https or http protocol) from stdin ,then it fetches favicon.ico and calculates its hash value. It sorts the domains/subdomains/IPs according to their favicon hashes and the most interesting part is , It matches calculated favicon hashes with the favicon hashes present in the fingerprint dictionary , If matched then it will show you the results in the output, there is option to generate shodan dorks as well (that is pretty basic and you can do it manually as well)\n\n### How to install and use \n\nNote : Tested with python3.6.9 on Ubuntu/Kali\n\n```\n$ git clone https://github.com/devanshbatham/FavFreak\n$ cd FavFreak\n$ virtualenv -p python3 env\n$ source env/bin/activate\n$ python3 -m pip install mmh3\n$ cat urls.txt | python3 favfreak.py \n\n```\n\nExample Run : \n\nNote : URLs must begin with either http or https\n\n```\n$ cat urls.txt\nhttps://example.com\nhttps://test-example.com\nhttp://hack-example.com\n.. .. .. .. \n.. .. .. .. \nAND SO ON \n```\n\n`$ cat urls.txt | python3 favfreak.py -o output`\n\n**Fetching /favicon.ico and generating hashes :**\n\n![enter image description here](https://raw.githubusercontent.com/devanshbatham/FavFreak/master/static/favfreak.PNG)\n\n\n**Subdomains/IPs Sorted according to their Favicon hashes :**\n\n![favicon hashes](https://cdn-images-1.medium.com/max/1200/1*sqv1KLo5BBaLKSGSUwFUfw.png)\n\n\n**FingerPrint Based favicon Hash detection :**\n\n![enter image description here](https://cdn-images-1.medium.com/max/1200/1*2ncy9qEy9_-6CMDYLUa9XA.png)\n\n\n**Fingerprint dictionary looks like this :**\n![enter image description here](https://cdn-images-1.medium.com/max/1200/1*Tnn02JMqeZmIE-XSeSSFvw.png)\n\n\n### Add your own fingerprints\n\n```\nEdit favfreak.py , you will find a dictionary named 'fingerprint' , \nAdd your fingerprints in that dictionary !\n\n```\n\n### Contact\n\nShoot my DM : [@0xAsm0d3us](https://twitter.com/0xAsm0d3us)\n\n","funding_links":[],"categories":["Python","Weapons","Python (1887)","[](#table-of-contents) Table of contents"],"sub_categories":["Tools","[](#website-analyze)Website analyze"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevanshbatham%2FFavFreak","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdevanshbatham%2FFavFreak","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevanshbatham%2FFavFreak/lists"}