saksh-secure/src/config.js

A Node.js tool to investigate login form security and performance issues

const defaultConfig = {
    targetUrl: '',
    usernameField: 'username',
    passwordField: 'password',
    commonUsernames: ['admin', 'user', 'test'],
    commonPasswords: ['password', '123456', 'admin'],
    sqlInjectionPayloads: [
        "' OR '1'='1",
        "' OR ''='",
        "admin' --",
        "' UNION SELECT NULL, NULL --"
    ],
    xssPayloads: [
        '<script>alert("XSS")</script>',
        '"><img src=x onerror=alert("XSS")>',
        '<svg onload=alert("XSS")>'
    ],
    weakPasswords: [
        'pass',
        'password123',
        '12345678',
        'abcdefg'
    ],
    timeout: 5000,
    maxAttempts: 5
};

function getConfig(userConfig) {
    return { ...defaultConfig, ...userConfig };
}

module.exports = { getConfig };