From 729a0246d5952b3d1c7f4db92e76d205f1c152f9 Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Tue, 10 Sep 2024 14:01:21 +0400
Subject: [PATCH] fixed the FN template

---
 http/exposed-panels/authentik-panel.yaml | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/http/exposed-panels/authentik-panel.yaml b/http/exposed-panels/authentik-panel.yaml
index a8e2885971..ab31d943d6 100644
--- a/http/exposed-panels/authentik-panel.yaml
+++ b/http/exposed-panels/authentik-panel.yaml
@@ -1,7 +1,7 @@
 id: authentik-panel
 
 info:
-  name: authentik - Panel
+  name: Authentik Panel - Detect
   author: rxerium
   severity: info
   description: |
@@ -12,24 +12,29 @@ info:
     max-request: 1
     verified: true
     shodan-query: http.favicon.hash:-178113786
-  tags: authentik,sso,mfa,panel
+  tags: authentik,sso,mfa,panel,detect
 
 http:
   - method: GET
     path:
       - "{{BaseURL}}"
-
+      - "{{BaseURL}}/static/dist/assets/icons/icon.png"
 
     host-redirects: true
     max-redirects: 2
+    stop-at-first-match: true
 
-    matchers-condition: and
+    matchers-condition: or
     matchers:
       - type: word
         part: body
         words:
           - "<title>authentik</title>"
+          - "window.authentik"
+          - "authentik.css"
+        condition: or
+        case-insensitive: true
 
-      - type: status
-        status:
-          - 200
+      - type: dsl
+        dsl:
+          - "(\"-178113786\" == mmh3(base64_py(body)))"