1 files changed, 133 insertions, 0 deletions
diff --git a/nselib/data/favicon-db b/nselib/data/favicon-db
new file mode 100644
index 0000000..6dc80e5
--- /dev/null
+++ b/nselib/data/favicon-db
@@ -0,0 +1,133 @@
+# These are the most common icons from a scan of all dmoz sites in January
+# 2010. Icons are listed in decreasing order by frequency.
+
+# Commented-out lines are those that are too broad to be useful in
+# identification.
+
+156515DA3C0F7DC6B2493BD5CE43F795: Nmap Project
+# D41D8CD98F00B204E9800998ECF8427E: empty file
+9CEAE7A3C88FC451D59E24D8D5F6F166: Parallels Plesk Panel
+63B982EDDD64D44233BAA25066DB6BC1: Joomla! CMS
+DCEA02A5797CE9E36F19B7590752563E: Parallels Plesk Panel
+64CA706A50715E421B6C2FA0B32ED7EC: Parallels Plesk Panel
+6C4EC806C82AB04D6B7D857E6FB68F95: Doteasy web hosting
+1CE0C63F8BD1E5D3376EC0AE95A41C08: Parallels Plesk Panel
+# ECAA... is a UTF-8 byte order mark, so may be more general.
+ECAA88F7FA0BF610A5A26CF545DCD3AA: Demand Media domain parking
+5B0E3B33AA166C88CEE57F83DE1D4E55: DotNetNuke CMS
+59A0C7B6E4848CCDABCEA0636EFDA02B: Blogger blog hosting
+6F767458B952D4755A795AF0E4E0AA17: Yahoo! web hosting
+E1E8BDC3CE87340AB6EBE467519CF245: BlueHost web hosting
+DF055C65114B64B29EA68721FCDF9039: Online.net web hosting
+CEDDC34CBEC02D74FE40368E2DC1FA90: Mambo CMS
+E6A9DC66179D8C9F34288B16A02F987E: Drupal CMS
+09DF839F1958F0ADD6B872DFF4E0AA21: Infoseek Japan web hosting
+2C0067D9382A7F1751FED2D200F38DB7: Point2 Agent real estate marketing
+3829C84B91013773DCC4B080E1829B8D: TypePad blog hosting
+# B7EBD6E8609ECBF0F053BAF5F550CB04: Blank white 16x16 icon; doesn't seem to be
+# associated with any particular web host
+F08DF8E5DE871525D8467E9514174448: Cortix web hosting
+7E20C3F975EC430AC88E5863C0F48B23: CountyWebsite.com web hosting
+CA79ABA701B8ED97D4505BCD766DF6F3: Parked.com domain parking
+# 325472601571F31E1BF00674C368D335: Transparent 1x1 GIF
+389A8816C5B87685DE7D8D5FEC96C85B: XOOPS CMS
+FA54DBF2F61BD2E0188E47F5F578F736: WordPress CMS
+7194D8AFD9E3A6DD0048149C3F66D60A: Endurance International web hosting
+# 0C46... is seen mainly on forum hosting sites, but also WordPress themes and
+# other sites.
+# 0C46689B7D84E977E3C3683C6F316122:
+E52C40433AA5F9256E521D7C139A05BD: Avenet web hosting
+# D5FE... is a Gravatar logo whose use seems to be limited to WordPress sites.
+D5FE5CBCC31CFF5F8AC010DB72EB000C: WordPress CMS
+C1201C47C81081C7F0930503CAE7F71A: vBulletin forum
+A31552D4FCC0EA68D69153E458FE6AB2: Google Page Creator
+4EE75CA12A52425B9514EE6DE25D23FE: HostMonster web hosting
+1CDECC190B122A232E64945332DE0546: DomainSponsor domain parking
+# 4133... "<html><head><meta http-equiv="refresh" content="0"></head></html>".
+# Doesn't look specific to any web host or software.
+# 4133FBAD57C15CAF3B18B9B65EDCEE76: HTML refresh
+4EB846F1286AB4E7A399C851D7D84CCA: Plone CMS
+D99217782F41E71BCAA8E663E6302473: Parallels Plesk Panel
+A28EBCAC852795FE30D8E99A23D377C1: Sun ONE web server
+A2714BE3E4C2F0AD16F33D3138033483: Motorola eSite Builder (Resin web server)
+F30B5ED270A57EABEA60BEB935E2B800: FC2 blog hosting
+E9E6C56F63122FB05E6899E1DEDD0734: Worldsoft CMS
+A92054C4D5EDC75AB9B8B3CE8BF0BCB6: hit.bg web hosting
+5E1E9CC940D3BFAA59F51282D9FEC510: Free web hosting (free.fr)
+C5388DFFAB10DA7531F94E7424BE3394: FC2WEB web hosting
+CE16CDE3E74E64131992DA97B266EE95: LiveJournal blog hosting
+2C338C26309E13987D315D85F499D7F2: e107 CMS
+7CEB7789D54A151FDC75C59925351B7B: Chez.com web hosting
+A1C686EB6E771878CF6040574A175933: CivicPlus government web sites
+630B121C290442A00A95AE1196AA37FF: wz.cz web hosting
+376CBEF2F074485F525BBF45DBFC2CBA: Hosteur web hosting
+D6C8358104C64B2A3415F2F779C01EF2: Google Sites web hosting
+71FA36961A58E12A525E7E0EA1F4A30D: About.com
+5C3E5BD042D8F70C68BA903B85BA7D2E: Earthlink web hosting
+DAB7634E942AA927D100CA3B57795F72: Interfree web hosting
+E223C25C0E0B2DBEF4205FBF15B5F9BB: Recipero schools.ik.org web hosting
+35C5093C70B822D05219AF50F95FC546: Association of Liberal Democrat Councillors web hosting
+5F6309EA0D1ADEAB12C18DC31BE49771: Reliance Network real estate web hosting
+61E029C99ABC5CF058ABC77562A69F98: SchoolCenter CMS
+0AD3A7E2C3A7B144C04E73050A63DF0B: iHOUSE real estate web hosting
+BC96CB8D0841380F3504BB5584F78198: ekmpowershop web store
+A5220EF442813C2FC6EE8CF13560278F: Republika web hosting
+FF2C8612B75B5F9A6175E016FE4AA609: Apache on Linux
+1F85F1F312825C87294A80C5BF9F0774: ForMinistry church web hosting
+FDC1A6AA785111BF77A811ADEB0DF4B0: Dealerskins auto sales web hosting
+FA339F101F0C0D65EE46CB96A06C8F45: Sidearm athletics CMS
+29C923487A6D45E59AE802C3F2902738: Elexio church CMS
+3646670CAC1E2AFAE1FE152F2FD8C118: Voila web hosting
+
+# These sites were less common than those above in the January 2010 survey, but
+# were in the top 50 in an earlier survey in 2009. These are not in order.
+
+# 68B3... is a single \n byte.
+# 68B329DA9893E34099C7D8AD5CB9C940: newline
+AF999538CD3D4D0370F3EA92E0A6070F: H-Sphere Control Panel
+10BD6AD7B318DF92D9E9BD03104D9B80: Plone CMS
+A34DEA4BD04BDB816BEA176619C29063: Parallels Confixx Control Panel
+EC49973C1991BF39FCDB53260467F39F: Parallels Control Panel
+292B586171617B56E77EE694485B1052: hover domain forwarding
+4644F2D45601037B8423D45E13194C93: Apache Tomcat
+BEFCDED36AEC1E59EA624582FCB3225C: Thomson/Speedtouch Device
+D16A0DA12074DAE41980A6918D33F031: Thomson/Speedtouch 605 Device
+EDAAEF7BBD3072A3A0C3FB3B29900BCB: Reynolds WebMakerX auto sales CMS
+73778A17B0D22FFBB7D6C445A7947B92: Apache on Mac OS X
+B25DBE60830705D98BA3AAF0568C456A: iPlanet web server
+81ED5FA6453CF406D1D82233BA355B9A: E-zekiel church CMS
+226FFC5E483B85EC261654FE255E60BE: Netscape Enterprise Server 4
+639B61409215D770A99667B446C80EA1: IBM Lotus Notes Collaboration Software
+7DBE9ACC2AB6E64D59FA67637B1239DF: IBM Lotus Domino Collaboration Software
+A8FE5B8AE2C445A33AC41B33CCC9A120: Arris Touchstone Device
+
+# Other icons that are good to know but don't have measured frequency data.
+
+# sslstrip 0.7 lock.ico.
+70625A6E60529A85CC51AD7DA2D5580D: sslstrip
+B4EF6B5F343C8DF8FEA454C04B2FD614: Sourcefire http admin
+
+# Cakephp's favicon.ico
+C0533AE5D0ED638BA3FB3485D8250A28: CakePHP 1.1.x application
+66B3119D379AEE26BA668FEF49188DD3: CakePHP 1.2.x-1.3.x Application
+
+# Top new favicons according to Shodan.io 2018-08-11
+89B932FCC47CF4CA3FAADB0CFDEF89CF: Hikvision DVR
+45210ACE96CE9C893F8C27C5DECAB10D: FRITZ!Box
+#BD9E17C46BBBC18AF2A2BD718DDDAD0E: DVR? Intelbras, maybe
+C60EA375C39D1AB273C4D1BEE717287A: Synology DiskStation Manager
+6DCAB71E60F0242907940F0FCDA69EA5: Ubiquiti AirOS
+1DB747255C64A30F9236E9D929E986CA: Parallels Plesk
+F3418A443E7D841097C714D69EC4BCB8: Google
+E462005902F81094AB3DE44E4381DE19: Fortinet
+60FA7ED2309D77DE1F9DC5E7C741AC48: SonicWall
+88644C0B60BF24B96D3D15F19196944E: Ubee Interactive Cable Modem
+
+# Top new favicons according to Shodan.io 2020-09-03
+9637EBD168435DE51FEA8193D2D89E39: OSS-Labs BT Panel
+7EF1F0A0093460FE46BB691578C07C95: DedeCMS
+0F584138AACFB79AABA7E2539FC4E642: Plex
+A1EADAF7974E7CE9889A5D7A07844590: Outlook Web App 2013-2019
+650B28C6CF1B473AED15BA26BAD1DA92: Plesk Obsidian
+5E4FCC77C49E69B4F55AED91C05256F3: ASUS AiCloud
+0488FACA4C19046B94D07C3EE83CF9D6: Spring Java Framework