edoardottt / favirecon Goto Github PK

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2028150977: https://shodan.io/search?query=http.favicon.hash%3A-2028150977
• 2029529270: https://shodan.io/search?query=http.favicon.hash%3A2029529270
• -2030939024: https://shodan.io/search?query=http.favicon.hash%3A-2030939024
• 2032478369: https://shodan.io/search?query=http.favicon.hash%3A2032478369
• 2032487957: https://shodan.io/search?query=http.favicon.hash%3A2032487957

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• 2016727121: https://shodan.io/search?query=http.favicon.hash%3A2016727121
• 2017541283: https://shodan.io/search?query=http.favicon.hash%3A2017541283
• 2018290563: https://shodan.io/search?query=http.favicon.hash%3A2018290563
• 2021342287: https://shodan.io/search?query=http.favicon.hash%3A2021342287
• -2022766869: https://shodan.io/search?query=http.favicon.hash%3A-2022766869

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2036444602: https://shodan.io/search?query=http.favicon.hash%3A-2036444602
• -2041778663: https://shodan.io/search?query=http.favicon.hash%3A-2041778663
• -2044079375: https://shodan.io/search?query=http.favicon.hash%3A-2044079375
• 2045611526: https://shodan.io/search?query=http.favicon.hash%3A2045611526
• 2047138954: https://shodan.io/search?query=http.favicon.hash%3A2047138954

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

Write a script that automatically collects favicon hashes + product names from projectdiscovery/nuclei-templates and save them in a .csv file.

See https://github.com/search?q=repo%3Aprojectdiscovery%2Fnuclei-templates+%2Fhttp.favicon.hash%2F&type=code

It could be something like:

• Parse all the YAML templates in the root directory (nuclei-templates)
• Extract values (if present): vendor,product,favicon
• Deduplicate results if needed
• Check if product == vendor, if yes only one of them used, otherwise vendor - product
• Save them in a .csv file

• Take one (or more than one) element of your choice in scripts/favicon-to-add.txt
• Add the favicon value(s) associated with a product name to db.json (in alphabetical order)
• Remove the element(s) from the scripts/favicon-to-add.txt file

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2065461083: https://shodan.io/search?query=http.favicon.hash%3A-2065461083
• 2065589381: https://shodan.io/search?query=http.favicon.hash%3A2065589381
• -2065594952: https://shodan.io/search?query=http.favicon.hash%3A-2065594952
• -206623908: https://shodan.io/search?query=http.favicon.hash%3A-206623908
• 2066412882: https://shodan.io/search?query=http.favicon.hash%3A2066412882

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

In resource-constrained environments we sometimes cannot afford to install full-blown Go + build packages with it: good practice is to have pre-packaged binary releases for each platform.

You can include this in a GitHub action workflow, by leveraging something like the https://github.com/marketplace/actions/go-release-binaries action which automates the process.

For reference:

• https://github.com/marketplace/actions/goreleaser-action
• https://github.com/edoardottt/cariddi/blob/main/.goreleaser.yaml
• https://github.com/edoardottt/cariddi/blob/main/.github/release.yml
• https://github.com/edoardottt/cariddi/blob/main/.github/workflows/release-binary.yml
• https://github.com/edoardottt/cariddi/blob/main/.github/workflows/release-test.yml

.

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• 2061800448: https://shodan.io/search?query=http.favicon.hash%3A2061800448
• 2061858093: https://shodan.io/search?query=http.favicon.hash%3A2061858093
• 2062026853: https://shodan.io/search?query=http.favicon.hash%3A2062026853
• -2062525755: https://shodan.io/search?query=http.favicon.hash%3A-2062525755
• -2062596654: https://shodan.io/search?query=http.favicon.hash%3A-2062596654

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• 2067267180: https://shodan.io/search?query=http.favicon.hash%3A2067267180
• -2067519629: https://shodan.io/search?query=http.favicon.hash%3A-2067519629
• 2068657956: https://shodan.io/search?query=http.favicon.hash%3A2068657956
• 2068826621: https://shodan.io/search?query=http.favicon.hash%3A2068826621
• 2069378109: https://shodan.io/search?query=http.favicon.hash%3A2069378109

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Take one (or more than one) element of your choice in scripts/favicon-to-add.txt
• Add the favicon value(s) associated with a product name to db.json (in alphabetical order)
• Remove the element(s) from the scripts/favicon-to-add.txt file

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2057558656: https://shodan.io/search?query=http.favicon.hash%3A-2057558656
• -2057590733: https://shodan.io/search?query=http.favicon.hash%3A-2057590733
• 2059893391: https://shodan.io/search?query=http.favicon.hash%3A2059893391
• 2060565483: https://shodan.io/search?query=http.favicon.hash%3A2060565483
• 2061303838: https://shodan.io/search?query=http.favicon.hash%3A2061303838

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2000384200: https://shodan.io/search?query=http.favicon.hash%3A-2000384200
• 2001262648: https://shodan.io/search?query=http.favicon.hash%3A2001262648
• 2002870448: https://shodan.io/search?query=http.favicon.hash%3A2002870448
• 2004732863: https://shodan.io/search?query=http.favicon.hash%3A2004732863
• -2007650109: https://shodan.io/search?query=http.favicon.hash%3A-2007650109

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• 1992142317: https://shodan.io/search?query=http.favicon.hash%3A1992142317
• -1995251161: https://shodan.io/search?query=http.favicon.hash%3A-1995251161
• -1996576874: https://shodan.io/search?query=http.favicon.hash%3A-1996576874
• 199682422: https://shodan.io/search?query=http.favicon.hash%3A199682422
• -1998633262: https://shodan.io/search?query=http.favicon.hash%3A-1998633262

Remember to use the devel branch for the PR

Add a link to the GIF in the README.

• GIF: https://github.com/edoardottt/images/blob/main/favirecon/favirecon.gif
• See csprecon README, must be the same

Move the database to a JSON file and the embed it with the embed package

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2032679519: https://shodan.io/search?query=http.favicon.hash%3A-2032679519
• -2032859040: https://shodan.io/search?query=http.favicon.hash%3A-2032859040
• 2033037722: https://shodan.io/search?query=http.favicon.hash%3A2033037722
• 2035381193: https://shodan.io/search?query=http.favicon.hash%3A2035381193
• 203612613: https://shodan.io/search?query=http.favicon.hash%3A203612613

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -201070369: https://shodan.io/search?query=http.favicon.hash%3A-201070369
• -2012355198: https://shodan.io/search?query=http.favicon.hash%3A-2012355198
• 2012805438: https://shodan.io/search?query=http.favicon.hash%3A2012805438
• -2013156129: https://shodan.io/search?query=http.favicon.hash%3A-2013156129
• 2013200368: https://shodan.io/search?query=http.favicon.hash%3A2013200368

Remember to use the devel branch for the PR

• Take one element of your choice in scripts/favicon-to-add.txt
• Add that favicon value associated with a name to db.json (in alphabetical order)
• Remove that element from the scripts/favicon-to-add.txt file

Is your feature request related to a problem? Please describe.
Tool is really good, but it seems not working in some scenarios, like if a site has placed it's favicon.ico file in a directory (Example: http://example[.]com/images/favicon.ico), tool will miss out the favicon. So instead of statically requesting just favicon.ico, it is recommend to first locate the path of favicon.ico in the source and then request it.

Describe the solution you'd like
The Tool should grep for .ico extension in page source, and then request that path for catching actual favicon.ico file

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2051649833: https://shodan.io/search?query=http.favicon.hash%3A-2051649833
• -2052468252: https://shodan.io/search?query=http.favicon.hash%3A-2052468252
• 2053280074: https://shodan.io/search?query=http.favicon.hash%3A2053280074
• 2056442365: https://shodan.io/search?query=http.favicon.hash%3A2056442365
• 2057414495: https://shodan.io/search?query=http.favicon.hash%3A2057414495

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

Fix Path Traversal in MHolt Archiver dependabot security alert. It isn't sure if favirecon is affected (not likely because the import is indirect).

Dependabot can't find a published or compatible non-vulnerable version for https://github.com/mholt/archiver

All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target extraction directory, which results in the final path ending up outside of the target folder. For instance, a zip may hold a file with a "../../file.exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code, the problem can turn into an arbitrary code execution issue quite easily.

Affected versions: >= 3.0.0, < 3.3.2
Patched version: 3.3.2

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• 2048109897: https://shodan.io/search?query=http.favicon.hash%3A2048109897
• -2048981507: https://shodan.io/search?query=http.favicon.hash%3A-2048981507
• -2049046500: https://shodan.io/search?query=http.favicon.hash%3A-2049046500
• 2049082371: https://shodan.io/search?query=http.favicon.hash%3A2049082371
• -2051646211: https://shodan.io/search?query=http.favicon.hash%3A-2051646211

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

add ratelimit option

• Add these 5 favicon values associated with a product name to db.json (in alphabetical order)
• Remove the entries from the scripts/favicon-to-add.txt file

The favicons:

• -2023266783: https://shodan.io/search?query=http.favicon.hash%3A-2023266783
• 2023619029: https://shodan.io/search?query=http.favicon.hash%3A2023619029
• -2024806776: https://shodan.io/search?query=http.favicon.hash%3A-2024806776
• -2024949122: https://shodan.io/search?query=http.favicon.hash%3A-2024949122
• 2027028811: https://shodan.io/search?query=http.favicon.hash%3A2027028811

Zoomeye too can be used with the iconhash: label https://www.zoomeye.org/searchResult?q=iconhash%3A

Remember to use the devel branch for the PR

.

• Take one (or more than one) element of your choice in scripts/favicon-to-add.txt
• Add the favicon value(s) associated with a product name to db.json (in alphabetical order)
• Remove the element(s) from the scripts/favicon-to-add.txt file

Remeber to use the devel branch