What is Flavicon Loockup

You can identify the platform used to build a website by utilizing the MD5 hash of its favicon. Many content management systems (CMS) and website platforms use default favicons, allowing their hashes to be matched against known values in databases. By hashing the favicon and comparing it with these records, you can often determine the underlying technology or CMS powering the site. This technique is useful for reconnaissance during penetration testing or for general curiosity about a site's infrastructure.

Commands

steps

• curl WEBSITE/.../FLAVICON.ico | md5sum
• compare the hash fond with the hash on https://wiki.owasp.org/index.php/OWASP_favicon_database (opens in a new tab)