PHPackages julesgraus/favicontracker - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. julesgraus/favicontracker ActiveLibrary[Security](/categories/security) julesgraus/favicontracker ========================= Enables tracking of users via a favicon tricks. Even when they are incognito. For educational purposes only. 0.2(5y ago)282MITPHP Since Mar 18Pushed 5y ago1 watchersCompare [ Source](https://github.com/julesgraus/favicontracker)[ Packagist](https://packagist.org/packages/julesgraus/favicontracker)[ RSS](/packages/julesgraus-favicontracker/feed)WikiDiscussions master Synced 1mo ago READMEChangelog (1)Dependencies (1)Versions (3)Used By (0) favicontracker ============== [](#favicontracker) Enables tracking of users via a favicon tricks in your Laravel project. Even when they are incognito. For educational purposes only. Installation ------------ [](#installation) - run `composer require julesgraus/favicontracker` in the root of your laravel 6+ project. - Publish the config file using `php artisan vendor:publish --tag=fit` in the root of your laravel project. Usage ----- [](#usage) When you've installed the package you will have some extra routes. The /fit route can be used to test the package. It will display a page on which you can start the read and write processes. You can also head to /fit/read and /fit/write yourself to programmatically start these processes. In the [Verified tracking procedures](#verified-tracking-procedures) section you will see what you need to do to track users. At the moment it does not seem to be possible to start a read action first, and then reliable write a tracking id into the favicons cache without closing the browser. Also a delay must be used to iterate over the tracking routes as it takes some time for the browser to start requesting a favicon. Verified tracking procedures ---------------------------- [](#verified-tracking-procedures) These procedures where followed in order to manually verify the tracking technique per browser: ### Chrome Mac v89.0.4389.90 [](#chrome-mac-v890438990) - Browser was opened. - Read procedure was started. Resulted in tracking id of 0. - Browser was closed completely and started. - Write procedure was started. Resulted in storing a plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. ### Safari Mac v4.0.3 (16610.4.3.1.7) [](#safari-mac-v403-166104317) - Browser was opened - Read procedure was started. Resulted in tracking id of 0. - Write procedure was started. Resulted in storing a plus zero id. - Read procedure was started. Resulted in retrieving the plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. - Write procedure was started. Resulted in storing a plus zero id. ### Firefox Mac (87.0) [](#firefox-mac-870) - No tracking procedure seems to work. ### Edge Mac (89.0.774.63) [](#edge-mac-89077463) - Browser was opened. - Read procedure was started. Resulted in tracking id of 0. - Browser was closed completely and started. - Write procedure was started. Resulted in storing a plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. Verified tracking procedures: ----------------------------- [](#verified-tracking-procedures-1) These procedures where followed in order to manually verify the tracking technique per browser: ### Chrome Mac v89.0.4389.90 [](#chrome-mac-v890438990-1) - Browser was opened. - Read procedure was started. Resulted in tracking id of 0. - Browser was closed completely and started. - Write procedure was started. Resulted in storing a plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. ### Safari Mac v4.0.3 (16610.4.3.1.7) [](#safari-mac-v403-166104317-1) - Browser was opened - Read procedure was started. Resulted in tracking id of 0. - Write procedure was started. Resulted in storing a plus zero id. - Read procedure was started. Resulted in retrieving the plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. - Write procedure was started. Resulted in storing a plus zero id. ### Firefox Mac (87.0) [](#firefox-mac-870-1) - No tracking procedure seems to work. ### Edge Mac (89.0.774.63) [](#edge-mac-89077463-1) - Browser was opened. - Read procedure was started. Resulted in tracking id of 0. - Browser was closed completely and started. - Write procedure was started. Resulted in storing a plus zero id. - Browser was closed completely and started. - Read procedure was started. Resulted in retrieving the plus zero id. How to clear the favicon cache ------------------------------ [](#how-to-clear-the-favicon-cache) Make sure you close your browser completely first. ### Chrome Mac: [](#chrome-mac) Delete `~/Library/Application Support/Google/Chrome/Default/Favicons`and `~/Library/Application Support/Google/Chrome/Default/Favicons-journal`. ### Chrome Windows [](#chrome-windows) Delete `C:\Users\\AppData\Local\Google\Chrome\User Data\Default`. ### Safari Mac: [](#safari-mac) Delete everything in `~/Library/Safari/Favicon Cache/`Does not always seem to work immediately (Safari 4.0.3) ### Microsoft Edge Mac [](#microsoft-edge-mac) Delete `~/Library/Application Support/Microsoft Edge/Default/Favicons`and `~/Library/Application Support/Microsoft Edge/Default/Favicons-journal`. ### Health Score 22 — LowBetter than 22% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity9 Limited adoption so far Community9 Small or concentrated contributor base Maturity43 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~15 days Total 2 Last Release 1865d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/aa9d50f487032f07737b2201a5500719f0f3d91207ad93541c50bc01440c1f7e?d=identicon)[julesgraus](/maintainers/julesgraus) --- Top Contributors [![julesgraus](https://avatars.githubusercontent.com/u/4387442?v=4)](https://github.com/julesgraus "julesgraus (9 commits)") ### Embed Badge ![Health badge](/badges/julesgraus-favicontracker/health.svg) ``` [![Health](https://phpackages.com/badges/julesgraus-favicontracker/health.svg)](https://phpackages.com/packages/julesgraus-favicontracker) ``` ### Alternatives [soved/laravel-gdpr GDPR compliance with ease 299127.5k2](/packages/soved-laravel-gdpr)[masterro/laravel-xss-filter Filter user input for XSS but don't touch other html 41254.5k](/packages/masterro-laravel-xss-filter)[enlightn/laravel-security-checker A Laravel package to scan your dependencies for known security vulnerabilities. 51173.4k](/packages/enlightn-laravel-security-checker)[nickurt/laravel-pwned-passwords PwnedPasswords for Laravel 11.x/12.x/13.x 187.5k](/packages/nickurt-laravel-pwned-passwords)[dgtlss/owaspadvisor A Laravel package to help developers implement OWASP Top 10 security guidelines 327.1k](/packages/dgtlss-owaspadvisor) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)