diff --git a/network/detection/pgsql-detect.yaml b/network/detection/pgsql-detect.yaml index 2cc80c95f0..57abf271f0 100644 --- a/network/detection/pgsql-detect.yaml +++ b/network/detection/pgsql-detect.yaml @@ -1,14 +1,18 @@ id: pgsql-detect info: - name: Postgresql Detection + name: PostgreSQL Authentication - Detect author: nybble04 severity: info description: | - PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance. + PostgreSQL authentication errors were detected. reference: - https://www.postgresql.org/docs/current/errcodes-appendix.html - https://www.postgresql.org/docs/current/client-authentication-problems.html + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 metadata: verified: true shodan-query: port:5432 product:"PostgreSQL" @@ -37,3 +41,5 @@ network: - "user \"nuclei\"" # The user nuclei (sent in request) doesn't exist - "database \"nuclei\"" # The db nuclei (sent in request) doesn't exist" condition: or + +# Enhanced by md on 2023/03/15