start project

app/services/data/threat_patterns.json

@@ -0,0 +1,11 @@
+{
+  "sensitive_paths": [
+    "/.env", "/.git/config", "wp-config.php", "/.htpasswd", "/phpmyadmin",
+    "/xmlrpc.php", ".sql.gz", ".sql.bak", ".zip", ".bak", ".old"
+  ],
+  "injection_markers": [
+    "union select", "' or '1'='1", "<script>", "javascript:",
+    "../", "..%2f", "%2e%2e%2f", "%252e%252e%252f"
+  ],
+  "scanner_user_agents": ["sqlmap", "nikto", "nmap", "acunetix", "nessus"]
+}