Favirecon
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
Install / Use
/learn @edoardottt/FavireconREADME
Note This tool heavily relies on its favicon hash database. If you think you have a new favicon hash that's worth adding or you think there is a wrong hash-service association please open an issue.
Install 📡
Homebrew
brew install favirecon
Snap
sudo snap install favirecon
Go
go install github.com/edoardottt/favirecon/cmd/favirecon@latest
Get Started 🎉
Usage:
favirecon [flags]
Flags:
INPUT:
-u, -url string Input domain
-l, -list string File containing input domains
-cidr Interpret input as CIDR
CONFIGURATIONS:
-hash string[] Filter results having these favicon hashes (comma separated)
-c, -concurrency int Concurrency level (default 50)
-t, -timeout int Connection timeout in seconds (default 10)
-rl, -rate-limit int Set a rate limit (per second)
-px, -proxy string Set a proxy server (URL)
OUTPUT:
-o, -output string File to write output results
-v, -verbose Verbose output
-s, -silent Silent output. Print only results
-j, -json JSON output
Examples 💡
Identify a single domain
favirecon -u https://www.github.com
echo https://www.github.com | favirecon
Grab all possible results from a list of domains (protocols needed!)
favirecon -l targets.txt
cat targets.txt | favirecon
Grab all possible results belonging to a specific target(s) (protocols needed!)
cat targets.txt | favirecon -hash 708578229
Grab all possible results from single CIDR
favirecon -u 192.168.1.0/24 -cidr
Use a Proxy
favirecon -u https://www.github.com -px http://127.0.0.1:8080
JSON Output
favirecon -u https://www.github.com -j
Changelog 📌
Detailed changes for each release are documented in the release notes.
Contributing 🛠
Just open an issue / pull request.
Before opening a pull request, download golangci-lint and run
golangci-lint run
If there aren't errors, go ahead :)
In the news 📰
License 📝
This repository is under MIT License.
edoardottt.com to contact me.
Related Skills
healthcheck
353.3kHost security hardening and risk-tolerance configuration for OpenClaw deployments
node-connect
353.3kDiagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps
xurl
353.3kA CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
prose
353.3kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
