Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th)

This post demonstrates a reconnaissance workflow that computes an mmh3/base64 hash of a site's favicon.ico, queries Shodan for matching favicons to discover additional hostnames, extracts hostnames via jq, filters and deduplicates them, and then scans resolved IPs with nmap/masscan to enumerate open ports; the author reports 363 hostnames resolving to 373 IPs and 5,091 open TCP ports while noting some false positives and potential honeypots.