Shodan Favicon Hunter 🔍

Automated bug bounty reconnaissance tool that leverages Shodan and favicon hash matching (mmh3) to discover exposed assets such as VPN panels, Fortinet EMS instances, and misconfigured services.

---

🎯 Use Case

This tool is designed for security researchers and bug bounty hunters to:

• Identify assets using shared favicon fingerprints
• Discover exposed infrastructure (VPN, remote access, admin panels)
• Map attack surface across bug bounty scopes
• Detect potential vulnerabilities like Fortinet EMS SQL Injection

🚀 Features

• Pulls real bug bounty domains
• Uses Shodan API
• Matches favicon hashes (mmh3)
• Targets VPN / remote endpoints
• Deduplicates results
• Multithreaded scanning

---

⚙️ Installation

git clone https://github.com/733nw0lf/shodan-favicon-hunter.git
cd shodan-favicon-hunter
pip install -r requirements.txt

---

🔑 Configuration

Edit config.py:

SHODAN_API_KEY = "your_key_here"
TARGET_HASH = "-800551065"

---

▶️ Usage

python3 main.py

---

🧠 How It Works

1. Fetches real bug bounty domains from public datasets
2. Queries Shodan using favicon hash (mmh3)
3. Applies smart subdomain heuristics (vpn, remote, secure)
4. Filters high-value ports (443, 8443, 10443)
5. Deduplicates and outputs structured results

This approach enables efficient discovery of exposed enterprise infrastructure.

📸 Screenshot

---

📊 Output

Saved in:

shodan_results.json

---

⚠️ Disclaimer

For authorized bug bounty and research only.

---

⭐ Credits

• Shodan
• bounty-targets-data