Merge pull request #7031 from idealphase/main

Updated favicon-detect.yaml

http/technologies/favicon-detect.yaml

@@ -10,15 +10,21 @@ info:
     - https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139
     - https://github.com/devanshbatham/FavFreak
     - https://github.com/sansatart/scrapts/blob/master/shodan-favicon-hashes.csv
-  tags: tech,favicon
   metadata:
-    max-request: 1
+    max-request: 2
+  tags: tech,favicon
 
 http:
   - method: GET
     path:
       - "{{BaseURL}}/favicon.ico"
+      - "{{BaseURL}}/{{path}}favicon.ico"
 
+    payloads:
+      path:
+        - images/
+
+    stop-at-first-match: true
     host-redirects: true
     max-redirects: 2
 
@@ -2657,3 +2663,8 @@ http:
         name: "Vue.js"
         dsl:
           - "status_code==200 && (\"-1252041730\" == mmh3(base64_py(body)))"
+
+      - type: dsl
+        name: "Sophos Email Appliance"
+        dsl:
+          - "status_code==200 && (\"-830586692\" == mmh3(base64_py(body)))"