This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category:OWASP Favicon Database Project"

From OWASP
Jump to: navigation, search
(→‎Roadmap)
Line 17: Line 17:
  
 
= Implementations =  
 
= Implementations =  
−
[http://nmap.org] - ''Nmap'' http-favicon.nse: NSE script for MD5 favicon fingerprinting
+
[Nmap http://nmap.org] - ''Nmap'' http-favicon.nse: NSE script for MD5 favicon fingerprinting
  
−
[http://www.openvas.org] - ''OpenVAS'' webserver_favicon.nasl: NASL NVT for MD5 favicon fingerprinting
+
[OpenVAS http://www.openvas.org] - ''OpenVAS'' webserver_favicon.nasl: NASL NVT for MD5 favicon fingerprinting
  
−
[http://www.nessus.org] - ''Nessus'' webserver_favicon.nasl: NASL plugin for MD5 favicon fingerprinting
+
[Nessus http://www.nessus.org] - ''Nessus'' webserver_favicon.nasl: NASL plugin for MD5 favicon fingerprinting
  
−
[http://w3af.sourceforge.net] - ''w3af'' favicon_identification.py: w3af plugin for MD5 favicon fingerprinting
+
[w3af http://w3af.sourceforge.net] - ''w3af'' favicon_identification.py: w3af plugin for MD5 favicon fingerprinting
  
 
= Related  =
 
= Related  =

Revision as of 07:11, 22 February 2010

Main

Idea is to have software enumerated via favicon.ico. How to do that? Take hash (in our case MD5) of favicon.ico and compare it against the known database. This project is about the favicon database itself and process in how to get the database of most frequent ones by crawling internet.

Vlatko Kosturjak initially wrote .nse script for nmap to perform enumeration of software via favicon.ico. He has noticed that there is very small database of existing MD5 fingerprints of favicon.ico and also most of the current md5 fingerprinting implementations have only web server enumeration, he have added also some popular CMS, wikis, etc. He added some of them manually, but it's boring process. Fyodor suggested that we should do internet wide scan and gather the statistics and MD5 fingerprints of most usual favicons.ico and document them.

Pages in category "OWASP Favicon Database Project"

The following 3 pages are in this category, out of 3 total.

O

Retrieved from "https://wiki.owasp.org/index.php?title=Category:OWASP_Favicon_Database_Project&oldid=78700"