start project

app/services/data/bot_signatures.json

@@ -0,0 +1,9 @@
+[
+  {"name": "Googlebot", "ua_substrings": ["Googlebot"], "verify_suffixes": [".googlebot.com", ".google.com"]},
+  {"name": "Bingbot", "ua_substrings": ["bingbot"], "verify_suffixes": [".search.msn.com"]},
+  {"name": "Yandex", "ua_substrings": ["YandexBot"], "verify_suffixes": [".yandex.ru", ".yandex.com", ".yandex.net"]},
+  {"name": "Baidu", "ua_substrings": ["Baiduspider"], "verify_suffixes": [".baidu.com", ".baidu.jp"]},
+  {"name": "DuckDuckBot", "ua_substrings": ["DuckDuckBot"], "verify_suffixes": [".duckduckgo.com"]},
+  {"name": "AhrefsBot", "ua_substrings": ["AhrefsBot"], "verify_suffixes": [".ahrefs.com"]},
+  {"name": "SemrushBot", "ua_substrings": ["SemrushBot"], "verify_suffixes": [".semrush.com"]}
+]

app/services/data/browser_signatures.json

@@ -0,0 +1,8 @@
+[
+  {"name": "Edge", "ua_substrings": ["Edg/", "EdgA/", "EdgiOS/"]},
+  {"name": "Opera", "ua_substrings": ["OPR/", "Opera"]},
+  {"name": "Chrome", "ua_substrings": ["Chrome/", "CriOS/"]},
+  {"name": "Firefox", "ua_substrings": ["Firefox/", "FxiOS/"]},
+  {"name": "Safari", "ua_substrings": ["Safari/"]},
+  {"name": "Internet Explorer", "ua_substrings": ["MSIE ", "Trident/"]}
+]

app/services/data/os_signatures.json

@@ -0,0 +1,7 @@
+[
+  {"name": "Windows", "ua_substrings": ["Windows NT"]},
+  {"name": "iOS", "ua_substrings": ["iPhone", "iPad", "iPod"]},
+  {"name": "macOS", "ua_substrings": ["Mac OS X", "Macintosh"]},
+  {"name": "Android", "ua_substrings": ["Android"]},
+  {"name": "Linux", "ua_substrings": ["Linux"]}
+]

app/services/data/threat_patterns.json

@@ -0,0 +1,11 @@
+{
+  "sensitive_paths": [
+    "/.env", "/.git/config", "wp-config.php", "/.htpasswd", "/phpmyadmin",
+    "/xmlrpc.php", ".sql.gz", ".sql.bak", ".zip", ".bak", ".old"
+  ],
+  "injection_markers": [
+    "union select", "' or '1'='1", "<script>", "javascript:",
+    "../", "..%2f", "%2e%2e%2f", "%252e%252e%252f"
+  ],
+  "scanner_user_agents": ["sqlmap", "nikto", "nmap", "acunetix", "nessus"]
+}