{"id":25074765,"url":"https://github.com/rix4uni/favinfo","last_synced_at":"2026-06-05T11:31:31.638Z","repository":{"id":242195864,"uuid":"808941204","full_name":"rix4uni/favinfo","owner":"rix4uni","description":"favinfo scrapes favicon in HTML code and many other different ways.","archived":false,"fork":false,"pushed_at":"2025-12-11T17:15:25.000Z","size":154,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-12-12T22:42:08.621Z","etag":null,"topics":["bugbounty","favicon","favicon-generator","favicon-hash","favicon-hash-generator","favicon-recon","recon","recon-tool","reconnaissance"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rix4uni.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-06-01T08:15:08.000Z","updated_at":"2025-12-11T17:12:55.000Z","dependencies_parsed_at":"2024-06-01T09:31:46.748Z","dependency_job_id":"7e600275-9324-470a-b927-68421e6df843","html_url":"https://github.com/rix4uni/favinfo","commit_stats":null,"previous_names":["rix4uni/favfreak","rix4uni/favinfo"],"tags_count":7,"template":false,"template_full_name":null,"purl":"pkg:github/rix4uni/favinfo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Ffavinfo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Ffavinfo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Ffavinfo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Ffavinfo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rix4uni","download_url":"https://codeload.github.com/rix4uni/favinfo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rix4uni%2Ffavinfo/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33939225,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-05T02:00:06.157Z","response_time":120,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bugbounty","favicon","favicon-generator","favicon-hash","favicon-hash-generator","favicon-recon","recon","recon-tool","reconnaissance"],"created_at":"2025-02-07T00:18:30.748Z","updated_at":"2026-06-05T11:31:31.621Z","avatar_url":"https://github.com/rix4uni.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"## FavInfo\n\nA powerful reconnaissance tool for extracting and analyzing favicons from websites. FavInfo extracts favicons, calculates multiple hash formats (Murmur3, MD5, SHA256), identifies technologies, and generates search engine queries for threat intelligence and asset discovery.\n\n## Features\n\n- 🔍 **Automatic Favicon Extraction**: Scrapes favicons from HTML or falls back to `/favicon.ico`\n- 🎯 **Multiple Hash Algorithms**: Calculates Murmur3, MD5, and SHA256 hashes (MD5/SHA256 in JSON mode only)\n- 🛠️ **Technology Identification**: Matches favicon hashes against fingerprint database\n- 🔎 **Search Engine Integration**: Generates queries for Shodan, FOFA, Censys, ZoomEye, and Quake (JSON mode)\n- 📊 **Flexible Output**: Simplified format for batch processing or detailed JSON format\n- ⚡ **High Performance**: Concurrent processing with configurable workers (default 50) for scanning thousands of URLs efficiently\n- 🔒 **Security Focused**: Supports custom User-Agents and TLS configuration\n- 📥 **Auto-Download**: Automatically downloads fingerprint database from GitHub if not found\n\n## Installation\n```\ngo install github.com/rix4uni/favinfo@latest\n```\n\n## Download prebuilt binaries\n```\nwget https://github.com/rix4uni/favinfo/releases/download/v0.0.7/favinfo-linux-amd64-0.0.7.tgz\ntar -xvzf favinfo-linux-amd64-0.0.7.tgz\nrm -rf favinfo-linux-amd64-0.0.7.tgz\nmv favinfo ~/go/bin/favinfo\n```\nOr download [binary release](https://github.com/rix4uni/favinfo/releases) for your platform.\n\n## Compile from source\n```\ngit clone --depth 1 https://github.com/rix4uni/favinfo.git\ncd favinfo; go install\n```\n\n## Usage\n```\nUsage of favinfo:\n      --concurrent int       Number of URLs to process concurrently (default 50)\n      --fingerprint string   Path to the fingerprint.json file (default: $HOME/.config/favinfo/fingerprint.json or ./fingerprint.json)\n      --json                 Output results in JSON format\n      --silent               Silent mode.\n      --source               Enable source output for where the url coming from scraped or added /favicon.ico\n      --timeout duration     Set the HTTP request timeout duration (default 30s)\n  -H, --user-agent string    Set the User-Agent header for HTTP requests (default \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36\")\n      --version              Print the version of the tool and exit.\n```\n\n## Usage Examples\n### Basic Usage\n```yaml\necho \"https://www.google.com\" | favinfo\n```\n\n### Multiple URLs\n```yaml\ncat subs.txt | favinfo\n```\n\n### With Custom Flags\n```yaml\necho \"example.com\" | favinfo --timeout 30s --user-agent \"Custom Agent\" --source\n```\n\n### JSON Output\n```yaml\necho \"https://www.google.com\" | favinfo --json\n```\n\n## Command Line Options\n\n| Flag | Short | Description | Default |\n|------|-------|-------------|---------|\n| `--concurrent` | | Number of URLs to process concurrently | `50` |\n| `--timeout` | | HTTP request timeout | `30s` |\n| `--source` | | Show source of favicon URLs | `false` |\n| `--user-agent` | `-H` | Set custom User-Agent | Mozilla/5.0... |\n| `--fingerprint` | | Path to fingerprint.json | Auto-detected |\n| `--json` | | Output in JSON format (full details) | `false` |\n| `--silent` | | Silent mode (no banner) | `false` |\n| `--version` | | Print version and exit | `false` |\n\n**Note**: Default output is simplified format (`URL [hash1, hash2]`). Use `--json` flag for detailed output with all hashes and search engine queries.\n\n## Fingerprint Database\n\nFavInfo uses a fingerprint database to identify technologies based on favicon hashes. The tool automatically looks for the database in:\n\n1. `$HOME/.config/favinfo/fingerprint.json` (recommended)\n2. `./fingerprint.json` (current directory)\n\nIf the database is not found in either location, FavInfo will automatically:\n- Create the `~/.config/favinfo/` directory if it doesn't exist\n- Download `fingerprint.json` from the GitHub repository\n- Save it to `~/.config/favinfo/fingerprint.json`\n\nThe download message is shown unless `--silent` flag is used.\n\n### Custom Fingerprint Location\n```yaml\necho \"example.com\" | favinfo --fingerprint /path/to/custom/fingerprint.json\n```\n\n## Output Examples\n\n### Simplified Output (Default)\nThe default output format is optimized for batch processing thousands of URLs. It shows only the URL and Murmur3 hash(es):\n\n```yaml\nhttps://www.google.com [708578229]\nhttps://www.bing.com [-583637433]\nhttps://example.com [123456789, 987654321]\n```\n\nThis format:\n- Only calculates Murmur3 hash (fastest processing)\n- Skips MD5/SHA256 calculations and fingerprint lookups\n- Perfect for scanning large lists of subdomains\n\n### JSON Output\n```json\n{\n  \"input_url\": \"https://www.google.com\",\n  \"favicon_url\": \"https://www.google.com/favicon.ico\",\n  \"murmur_hash\": 708578229,\n  \"md5_hash\": \"f3418a443e7d841097c714d69ec4bcb8\",\n  \"sha256_hash\": \"6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770\",\n  \"technology\": \"google\",\n  \"search_queries\": {\n    \"shodan\": \"http.favicon.hash:708578229\",\n    \"fofa\": \"icon_hash=\\\"708578229\\\"\",\n    \"censys\": \"services.http.response.favicons.md5_hash=\\\"f3418a443e7d841097c714d69ec4bcb8\\\"\",\n    \"zoomeye\": \"iconhash:708578229\",\n    \"quake\": \"favicon.hash:708578229\"\n  }\n}\n```\n\n## Supported Search Engines\n\n- **Shodan**: `http.favicon.hash:123456789`\n- **FOFA**: `icon_hash=\"123456789\"`\n- **Censys**: MD5 and SHA256 hash searches\n- **ZoomEye**: `iconhash:123456789`\n- **Quake**: `favicon.hash:123456789`\n\n## Use Cases\n\n### Threat Intelligence\n- Identify infrastructure belonging to specific organizations\n- Track threat actor infrastructure across different services\n- Discover related assets through favicon correlation\n\n### Asset Discovery\n- Find all instances of a particular technology stack\n- Map organizational digital footprint\n- Identify shadow IT resources\n\n### Red Team Operations\n- Fingerprint target technologies for vulnerability analysis\n- Discover related subdomains and infrastructure\n- Enumerate external attack surface\n\n## Advanced Usage\n\n### Batch Processing\n```yaml\n# Fast batch processing with simplified output (default, 50 concurrent workers)\ncat urls.txt | favinfo --timeout 15s --silent \u003e hashes.txt\n\n# High-performance batch processing with custom concurrency\ncat urls.txt | favinfo --timeout 15s --concurrent 100 --silent \u003e hashes.txt\n\n# Detailed batch processing with JSON output\ncat urls.txt | favinfo --timeout 15s --json \u003e results.json\n```\n\n### Integration with Other Tools\n```yaml\n# Extract domains from subfinder and get favicon hashes (simplified output)\nsubfinder -d example.com | favinfo --silent\n\n# Get detailed JSON output for specific analysis\necho \"example.com\" | favinfo --json | jq '.murmur_hash'\n\n# Process thousands of URLs efficiently with simplified output\ncat urls.txt | favinfo --silent \u003e hashes.txt\n```\n\n### Custom Fingerprint Database\nCreate your own fingerprint database by adding entries to `fingerprint.json`:\n```json\n{\n  \"123456789\": \"Custom Technology\",\n  \"987654321\": \"Internal Application v1.0\"\n}\n```\n\n## Configuration\n\n### Default Configuration Locations\n- **Linux/Mac**: `$HOME/.config/favinfo/fingerprint.json`\n- **Windows**: `%USERPROFILE%\\.config\\favinfo\\fingerprint.json`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frix4uni%2Ffavinfo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frix4uni%2Ffavinfo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frix4uni%2Ffavinfo/lists"}