diff --git a/network/detection/pgsql-detect.yaml b/network/detection/pgsql-detect.yaml index 2c537c541b..eeaca183d7 100644 --- a/network/detection/pgsql-detect.yaml +++ b/network/detection/pgsql-detect.yaml @@ -31,6 +31,7 @@ tcp: - "{{Host}}:5432" read-size: 2048 + matchers-condition: and matchers: - type: word part: body @@ -42,3 +43,11 @@ tcp: - "user \"nuclei\"" # The user nuclei (sent in request) doesn't exist - "database \"nuclei\"" # The db nuclei (sent in request) doesn't exist" condition: or + - type: word + words: + - denied + - Bad request + - HTTP + - 400 + condition: or + negative: true