What is a favicon hash?

A favicon hash is a MurmurHash3 value computed from a website's favicon file. Search engines like Shodan index these hashes, allowing you to find all servers running the same web application by searching for its favicon hash.

How is the Shodan favicon hash calculated?

The favicon file is base64-encoded, then the MurmurHash3 (32-bit) algorithm is applied to the base64 string to produce a signed 32-bit integer. This integer is used in the Shodan query: http.favicon.hash: .

Also available inRecon Hub →— All 5 recon tools in one workspace.

Favicon Hash Calculator

Upload a favicon to compute its MurmurHash3 hash for Shodan, Censys, and FOFA reconnaissance. Identifies known web server favicons automatically. All processing happens locally in your browser.

X LinkedIn Reddit

Favicon URL

Enter the full URL to a favicon. CORS restrictions may block some URLs — upload the file instead if needed.

Drag and drop a favicon file, or

Supports .ico, .png, .svg, .jpg, .gif, .webp

How Shodan Favicon Hashing Works

Fetch the raw favicon bytes from the target
Base64-encode the content
Insert newlines every 76 characters (MIME-style)
Compute MurmurHash3 (32-bit, signed) of the resulting string
Search Shodan with http.favicon.hash:<hash>

Related Tools

Search Dork Generator

Generate Google, Shodan, GitHub, and Censys search dorks.

Certificate Transparency Search

Search crt.sh for SSL certificates and subdomains.

DNS Record Lookup

Query DNS records with security insights for SPF/DMARC/DKIM.

Hash Generator

Hash text or files with MD5, SHA-1/256/384/512, and HMAC.

$loading...