additional matchers

http/exposures/configs/sphinxsearch-config.yaml

@@ -1,7 +1,7 @@
 id: sphinxsearch-config
 
 info:
-  name: Sphinx Search configuration file containing SQL credentials
+  name: Sphinx Search Config - Exposure
   author: gtrrnr
   severity: high
   description: sphinx.conf file contains SQL credentials and is publicly accessible.
@@ -11,7 +11,8 @@ info:
     - https://github.com/manticorp/SphinxSearch/blob/master/sphinx.conf.example
   metadata:
     max-request: 7
-  tags: sphinx,sphinxsearch,exposure
+    verified: true
+  tags: sphinx,sphinxsearch,exposure,config
 
 http:
   - method: GET
@@ -24,12 +25,16 @@ http:
       - "{{BaseURL}}/sphinx/sphinx.conf"
       - "{{BaseURL}}/sphinxsearch/sphinx.conf"
 
+    stop-at-first-match: true
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
           - "sql_user"
+          - "sql_pass"
+          - "indexer"
+        condition: and
 
       - type: status
         status: