Workflow and Springboot detection improvements

technologies/detect-springboot-actuator.yaml

@@ -1,20 +0,0 @@
-id: detect-springboot-actuator
-
-info:
-  name: Detect Springboot Actuators
-  author: that_juan_ & dwisiswant0 & wdahlenb
-  severity: info
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/actuator"
-    matchers-condition: and
-    matchers:
-      - type: word
-        part: body
-        words:
-          - '{"_links":{"self"'
-      - type: status
-        status:
-          - 200

technologies/springboot-actuator.yaml

@@ -0,0 +1,27 @@
+id: springboot-actuator
+
+info:
+  name: Detect Springboot Actuators
+  author: that_juan_ & dwisiswant0 & wdahlenb
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/actuator"
+      - "{{BaseURL}}/favicon.ico"
+
+    matchers-condition: or
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"_links":'
+          - '"self":'
+          - '"health"'
+        condition: and
+
+      - type: dsl
+        name: "favicon"
+        dsl:
+          - "status_code==200 && (\"116323821\" == mmh3(base64_py(body)))"

workflows/springboot-workflow.yaml

@@ -11,7 +11,7 @@ info:
 
 workflows:
 
-  - template: technologies/detect-springboot-actuator.yaml
+  - template: technologies/springboot-actuator.yaml
     subtemplates:
       - template: misconfiguration/springboot-configprops.yaml
       - template: misconfiguration/springboot-env.yaml