TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Shodan Blog

Deep Dive: http.favicon

John Matherly · 2024-01-10 · Read original ↗

ATT&CK techniques detected

2 predictions
T1046Network Service Discovery
69%
"##vicon hash given a url, hostname or local file path. $ favscan - h calculate the favicon hash of a local file, hostname or url usage : favscan [ options ] < location > arguments : < location > options : - v, - - verbose - h, - - help print help - v, - - version print version fa…"
T1071.001Web Protocols
34%
": https : / / faviconmap. shodan. io datapedia entry for http. favicon : https : / / datapedia. shodan. io / property / http. html # httpfavicon"

Summary

Favicons are the small icons that you see in the browser tab next to the website title or in your bookmarks. For example, the Shodan logo on the left side of the browser tab is the favicon:

They typically contain the logo of the company which gives them 2 functions: