Update matchers

network/detection/pgsql-detect.yaml

@@ -9,6 +9,9 @@ info:
   metadata:
     verified: true
     shodan-query: port:5432 product:"PostgreSQL"
+  reference:
+    - https://www.postgresql.org/docs/current/errcodes-appendix.html
+    - https://www.postgresql.org/docs/current/client-authentication-problems.html
   tags: network,postgresql,db
 
 network:
@@ -27,5 +30,9 @@ network:
       - type: word
         part: body
         words:
-          - "SCRAM-SHA-256"
-          - "Mpassword authentication failed for user"
+          - "28000"                   # Error code for invalid_authorization_specification
+          - "28P01"                   # Error code for invalid_password
+          - "SCRAM-SHA-256"           # Authentication prompt
+          - "pg_hba.conf"             # Client authentication config file
+          - "user \"nuclei\""         # The user nuclei (sent in request) doesn't exist
+          - "database \"nuclei\""     # The db nuclei (sent in request) doesn't exist