{
  "sensitive_paths": [
    "/.env", "/.git/config", "wp-config.php", "/.htpasswd", "/phpmyadmin",
    "/xmlrpc.php", ".sql.gz", ".sql.bak", ".zip", ".bak", ".old"
  ],
  "injection_markers": [
    "union select", "' or '1'='1", "<script>", "javascript:",
    "../", "..%2f", "%2e%2e%2f", "%252e%252e%252f"
  ],
  "scanner_user_agents": ["sqlmap", "nikto", "nmap", "acunetix", "nessus"]
}