From a608067c3c76222efa9a99c5aac22d3d5ab76b25 Mon Sep 17 00:00:00 2001 From: pentesttoolscom Date: Mon, 14 Aug 2023 10:07:02 +0300 Subject: [PATCH] Fix unauth-psql.yaml false positive Fix unauth-psql.yaml giving false positive results when the request is reflected in the HTTP/FTP response. --- network/misconfig/unauth-psql.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/network/misconfig/unauth-psql.yaml b/network/misconfig/unauth-psql.yaml index 2bf2b55c05..8b7cd6616e 100644 --- a/network/misconfig/unauth-psql.yaml +++ b/network/misconfig/unauth-psql.yaml @@ -26,6 +26,7 @@ tcp: - "{{Hostname}}" - "{{Host}}:5432" + matchers-condition: and matchers: - type: word part: raw @@ -34,3 +35,10 @@ tcp: - "Locale Provider" - "Owner" condition: and + + - type: word + words: + - "FTP" + - "HTTP" + condition: or + negative: true