On Favicons: From Browser Icons to Attack Surface Intelligence
Research Read at Bishop Fox
Below is the opening; the full story is at Bishop Fox.
From Bishop Fox
TL;DR
Used an AI-assisted pipeline to hash, correlate, and enrich a favicon signature set. Sharing some of the dataset, the methodology, and a primer on favicons and why they are worth fingerprinting in the first place. The accompanying repo will carry the dataset, and any longer-form technical content: github.com/BishopFox/Favicons.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.