Skip to content

Latest commit

 

History

History

FavBuster

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 

FavBuster - Project KillChain

A python script to automate MMH3 hash calculation of favicons.

https://en.wikipedia.org/wiki/MurmurHash

Made with ❤️ by Kamran Saifullah + Shrefa Ashour

PKC Language


Overview

FavIcons are the small icons shown with the title of the web page for most of the web applications. Leveraging this hash, it is possible to uncover vulnerabilities, exposed assets as well as fruitful for bug bounties. This script enables the ethical hackers to calculate the hashes firectly from the URL and with the provided icon file.

The script provides you with the queries for the following 2 platforms to be search on for your specific target.

  1. Shodan
  2. FOFA
  3. ZoomEye

Instructions for using the tool

Installing Dependencies

In order for the script to work properly, there are few dependencies which are required to be installed. Do it with the following from within the folder or as you like.

pip install -r requirements.txt

or you can install the dependecies one by one.

pip install colorama pip install mmh3

Begin The Hunt

Execute the FavHuster.py by doing simply as python3 FavBuster.py.

The scripts supports 3 parameters.

  1. For help FavBuster.py -h.
  2. For single file FavBuster.py -url.
  3. For directory FavBuster.py -file.

Favicon - Icon URL

Favicon - Icon File

Many Thanks

Shrefa Ashour + Kamran Saifullah


Contributions

Project Killchain values and appreciates contributions from the cybersecurity community. Feel free to contribute code, share new tools, update our knowledge base, or expand the IOC database.

Please review the contributing guidelines before making any contributions.

https://github.com/CyDefOps/project-killchain#contributions