custom.json

{
  "timeout": 10,
  "max_retries": 3,
  "backoff_factor": 0.3,
  "delay_between_attempts": 0.5,
  "delay_randomization": 0.3,
  "verify_ssl": true,
  "follow_redirects": true,
  "rotate_user_agents": true,
  "use_realistic_headers": true,
  "randomize_delays": true,
  "enable_auto_throttling": true,
  "consecutive_errors_threshold": 5,
  "throttle_backoff_multiplier": 2.0,

  "success_keywords": [
    "dashboard", "logout", "log out", "sign out",
    "bienvenido", "bienvenida", "welcome", "welcome back",
    "profile", "perfil", "mi cuenta", "my account",
    "admin panel", "panel de control", "administration", "administración",
    "sesión iniciada", "logged in", "signed in",
    "login successful", "successfully logged",
    "authentication successful", "autenticación exitosa",
    "access granted", "home", "inicio",
    "settings", "configuración", "preferences", "preferencias",
    "notifications", "notificaciones", "inbox", "messages",
    "mensajes", "bandeja de entrada",
    "success", "successful", "exitoso", "exitosa"
  ],

  "fail_keywords": [
    "invalid", "inválido", "error", "incorrect", "incorrecto", "wrong",
    "try again", "intenta de nuevo", "intente nuevamente",
    "falló", "fallo", "failed", "failure",
    "unauthorized", "no autorizado", "denied", "denegado",
    "access denied", "acceso denegado",
    "authentication failed", "autenticación fallida",
    "login failed", "inicio de sesión fallido",
    "invalid username", "usuario inválido",
    "invalid password", "contraseña inválida",
    "invalid credentials", "credenciales inválidas",
    "wrong username", "usuario incorrecto",
    "wrong password", "contraseña incorrecta",
    "incorrect username", "incorrect password",
    "bad credentials", "malas credenciales",
    "authentication error", "login error",
    "could not authenticate", "no se pudo autenticar",
    "account not found", "cuenta no encontrada",
    "user not found", "usuario no encontrado",
    "does not exist", "no existe",
    "invalid combination", "combinación inválida",
    "forbidden", "prohibido", "not allowed", "no permitido"
  ],

  "block_keywords": [
    "rate limit", "rate-limit", "ratelimit",
    "too many", "too many attempts", "too many requests",
    "demasiados intentos", "blocked", "bloqueado",
    "banned", "baneado", "captcha", "recaptcha", "hcaptcha",
    "temporarily locked", "temporalmente bloqueado",
    "account locked", "cuenta bloqueada", "ip locked",
    "abuse", "abuso", "suspicious activity", "actividad sospechosa",
    "rate exceeded", "límite excedido", "throttled",
    "slow down", "please wait", "por favor espera",
    "try again later", "intenta más tarde"
  ],

  "user_field_names": [
    "username", "user", "usuario", "email", "e-mail", "correo",
    "login", "user_name", "user-name", "userid", "user_id", "user-id",
    "login_name", "login-name", "loginname",
    "account", "cuenta", "account_name", "accountname",
    "nombre", "name", "uname", "uid", "identifier", "identificador"
  ],

  "pass_field_names": [
    "password", "pass", "pwd", "passwd", "passcode",
    "pass_code", "pass-code", "contraseña", "contrasena", "clave",
    "secret", "pin", "password1", "password_1",
    "user_password", "userpassword", "user-password",
    "login_password", "loginpassword", "login-password"
  ],

  "csrf_field_names": [
    "csrf_token", "csrf-token", "_token", "authenticity_token",
    "__requestverificationtoken", "nonce", "_wpnonce",
    "form_token", "form-token", "csrfmiddlewaretoken",
    "xsrf_token", "xsrf-token", "_csrf", "anti_csrf", "request_token"
  ],

  "authenticated_paths": [
    "dashboard", "admin", "panel", "home", "account", "profile",
    "portal", "welcome", "inicio", "mi-cuenta", "perfil",
    "control", "manage", "overview", "console", "workspace"
  ],

  "score_thresholds": {
    "status_change": 2,
    "length_change": 2,
    "hash_change": 2,
    "cookies_change": 3,
    "success_keywords": 5,
    "fail_keywords": -5,
    "login_form_present": -10,
    "min_success_score": 4
  }
}