daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix unauth_psql detection on other protocols 

If the protocol we send the request to reflects our message we detect it
as a FP. Excluding a 500 error code should be a more general rule.
patch-1
pentesttoolscom 2023-09-01 11:25:07 +03:00
parent d075b59bc6
commit 95da9ded2c
No known key found for this signature in database
GPG Key ID: F0A855624E6BD076
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
network/misconfig/unauth-psql.yaml
View File

@ -37,8 +37,10 @@ tcp:
condition: and condition: and
- type: word - type: word
part: raw
words: words:
- "FTP" - "FTP"
- "HTTP" - "HTTP"
- "500"
condition: or condition: or
negative: true negative: true