Security

Favicon Hash Fingerprinting

Identifying a web application by computing a hash, commonly MurmurHash3, of its favicon image and matching it against known values. Used by asset-discovery tools to find instances of a product across a network or the internet.

Deep dive

Learn Article

How to Fence In a Web App's Service Account So a Compromise Stops Short of Root

A six-step audit for the user your web application runs as: find its roads to root, close them, cut its network, scope its secrets, alert on behaviour it should never show, and prove the fence holds.

intermediate 5 min read

Back to glossary