Favicon hash
Favicon Hash generates a hash from a website favicon for use in Shodan searches.
About Favicon hash
Favicon Hash generates favicon hashes for use in Shodan searches. It can retrieve a favicon from a URL or from an uploaded local file, and returns the favicon hash with MD5 and SHA256 values. URL lookups also show the requested URL, redirect location, and content-type, and can be accessed through an API endpoint.
URL retrieval is handled by Cloudflare Workers, so it works only with domains using valid certificates on default ports 80 and 443. Some sites block requests from Cloudflare's edge; in those cases a favicon can be downloaded separately and uploaded for hashing. The site also publishes Python code for generating the hash locally.
Key features
- Retrieve favicon hash from a URL
- Generate hash from an uploaded local file
- API endpoint returning hash, MD5 and SHA256 as JSON
- Shows requested URL, redirect location and content-type
- Accepts URL-encoded input for retrieval requests
- Provides Python code for local hash generation
Best for: People using Shodan searches who need favicon hashes from URLs or files.
Good for
- Returns favicon hash alongside MD5 and SHA256 values
- Supports both URL retrieval and file upload
- Includes code example for generating hashes locally
Watch out for
- URL retrieval works only with domains
- Requires valid HTTPS certificates and default ports 80 and 443
- Some sites block requests from Cloudflare's edge
Favicon hash at a glance
- Website
- favicon-hash.kmsec.uk
- Category
- Privacy & Security › Security Tools
- Type
- Online tool
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
Favicon hash alternatives
Tools and sites you could use instead, ranked by how closely they match.
UUID Tools generates individual or bulk UUIDs and supports multiple UUID versions.
The Text and File Hash Calculator computes hashes such as MD5, SHA-1, SHA-256, SHA-512, and Whirlpool.
Search mobile app metadata and inspect security scores with BeVigil’s mobile app security engine.
JPEGMedic ARWE automatically recovers JPG files partially encrypted by ransomware, with a separate tool offering more recovery controls.
Superagent provides an autonomous security platform for testing applications, repositories, agents, and infrastructure.
Freemium
24 alternatives
This online generator creates UUIDs in versions 1, 3, 4, 5, 6, and 7 for use in applications and data records.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
Favicon hash FAQ
What does the URL API return?
It returns JSON with the requested URL, redirect location, content-type, favicon hash, MD5, and SHA256.
How can I hash a local favicon file?
POST the file as binary data to the /file endpoint, which returns the favicon hash, MD5, and SHA256.
Why might retrieval from a URL fail?
It requires domains with valid certificates on ports 80 or 443, and some sites block requests from Cloudflare's edge.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.