Fix unauth_psql detection on other protocols

If the protocol we send the request to reflects our message we detect it as a FP. Excluding a 500 error code should be a more general rule.
2023-09-01 11:25:07 +03:00 · 2023-09-01 11:25:07 +03:00 · 95da9ded2c
parent d075b59bc6
commit 95da9ded2c
1 changed files with 2 additions and 0 deletions
--- a/network/misconfig/unauth-psql.yaml
+++ b/network/misconfig/unauth-psql.yaml
@ -37,8 +37,10 @@ tcp:
        condition: and

      - type: word
+        part: raw
        words:
          - "FTP"
          - "HTTP"
+          - "500"
        condition: or
        negative: true