https://github.com/eremit4/favihunter
Discover and monitor internet assets using favicon hashes across search engines.
https://github.com/eremit4/favihunter
censys criminalip favicon favicon-hash fofa fofa-search getodin odin osint osint-python osint-tool python3 shodan silentpush theat-intel threat-hunting threat-intelligence validin zoomeye
Last synced: 28 days ago
JSON representation
Discover and monitor internet assets using favicon hashes across search engines.
- Host: GitHub
- URL: https://github.com/eremit4/favihunter
- Owner: eremit4
- License: mit
- Created: 2023-12-29T15:33:44.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-10-11T18:02:57.000Z (4 months ago)
- Last Synced: 2025-11-13T15:10:47.619Z (3 months ago)
- Topics: censys, criminalip, favicon, favicon-hash, fofa, fofa-search, getodin, odin, osint, osint-python, osint-tool, python3, shodan, silentpush, theat-intel, threat-hunting, threat-intelligence, validin, zoomeye
- Language: Python
- Homepage: https://pypi.org/project/favihunter/
- Size: 1.3 MB
- Stars: 218
- Watchers: 3
- Forks: 27
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-ip-search-engines - FaviHunter
- osint_stuff_tool_collection - Open Source Munitions Portal
- awesome-starts - eremit4/favihunter - Discover and monitor internet assets using favicon hashes across search engines. (python3)
README
# Favihunter
> Favicons are tiny icons used by modern web applications. When combined with search engines, they’re great pivots for discovering related internet assets.
This tool helps security practitioners find assets using favicon hashes across multiple search engines:
- [Censys](https://search.censys.io/)
- [Criminal IP](https://www.criminalip.io/)
- [FOFA](https://en.fofa.info/)
- [Hunter-How](https://hunter.how/)
- [Netlas](https://app.netlas.io)
- [Odin](https://search.odin.io/)
- [Shodan](https://www.shodan.io)
- [Silent Push](https://explore.silentpush.com)
- [Validin](https://app.validin.com)
- [VirusTotal](https://virustotal.com)
- [Zoomeye](https://www.zoomeye.ai)
## 🛠️ Installation
### Option A — PyPI (standard)
```bash
pip install favihunter
```
### Option B — pipx (isolated CLI install) — **recommended for command-line tools**
```bash
# install pipx if you don’t have it
python3 -m pip install --user pipx
python3 -m pipx ensurepath # then restart your shell
# install favihunter
pipx install favihunter
# upgrade later
pipx upgrade favihunter
# run without installing (one-shot)
pipx run favihunter --help
```
### Option C — From source (Poetry)
```bash
git clone https://github.com/eremit4/favihunter.git
cd favihunter
poetry install
```
> Using a virtual environment is recommended to avoid dependency conflicts.
## ⚡ Quickstart
```bash
favihunter --url https://python.org
```
Favihunter downloads the favicon, computes hashes (MMH3, MD5, SHA256, and optional perceptual hash), and prints ready-to-click search URLs.
## 🕵️♂️ Usage
```bash
favihunter --help
```
Analyze a single URL:
```bash
favihunter --url
```
Analyze a file with URLs (one per line):
```bash
favihunter --urls
```
Analyze a local favicon file:
```bash
favihunter --favicon
```
Clean the temp folder:
```bash
favihunter --remove
```
VirusTotal pivot:
```bash
favihunter --url --virus-total
```
> ## ✅ Requirements
* Python **3.8+**
* Linux/macOS (Windows is likely fine via PowerShell; please open an issue if you hit problems)
## 🧹 Uninstall / Upgrade
**pip**
```bash
pip install --upgrade favihunter
pip uninstall favihunter
```
**pipx**
```bash
pipx upgrade favihunter
pipx uninstall favihunter
```