Re: favicon survey script

[Fyodor <fyodor () insecure org>]

On Sun, Aug 09, 2009 at 08:08:35AM -0300, Joao Correa wrote:
> Hi Guys,
>
> Here are 14 more common favicons:
>
> D8BA35521DFC638F134CF3A64D1A6875:IBM
> F31837841BADDC72BB5AF80A532A75FA:Microsoft

So a variety of IBM and Microsoft products use this favicon, or you
just mean that the IBM/MS web sites themselves use these?

> D037EF2F629A22DDADCF438E6BE7A325:PHPMyAdmin
> CA3B716F25AAF139D83CA205B39F6A87:MediaWiki
> A2C4C351F8BA8EC02C8AEC910E3D0E8C:Sun
> A9F0F82E141D8543916559BA574D965A:Java
> CEDDC34CBEC02D74FE40368E2DC1FA90:Mambo
> 3905C0D2E530753B4C54A18C554B0B42:Zope

We may want to describe what the products do.  e.g. "PHPMyAdmin MySQL
web administration" and "Zope content management system".  I think our
script should accept comments in the list so we can comment on what
systems/versions we've found to use these favicons (similar to the
comments you'll find in nmap-os-db).

Similarly, "Java" is pretty vague.  What systems have you seen using
this favicon?

> FF2C8612B75B5F9A6175E016FE4AA609:nmap.org/insecure.org/seclists.org/sectools.org

Those are indeed some of the best sites on the Internet, but I think
we should focus on favicons included with platform software (used on
many sites) rather than mathcing the custom favicons that most
individual sites create.  After all, you usually know the name of the
site you're scanning.  But you might not know the infrastructure
information (e.g. what blogging software is running) which can be
disclosed by the favicons).

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org