fix round 1

env/attacker.py

@@ -1,51 +1,97 @@
 import requests
 import time
+import random
 
 TARGET = "http://127.0.0.1:7860"
 
+# Multiple attacker IPs
+ATTACKER_IPS = [
+    "192.168.1.10",
+    "192.168.1.11",
+    "192.168.1.12",
+    "10.0.0.5",
+    "172.16.0.3"
+]
+
 
 def brute_force():
+    ip = random.choice(ATTACKER_IPS)
+
     for i in range(5):
         requests.post(
             f"{TARGET}/login",
             data={
                 "username": "admin",
                 "password": "wrong"
-            }
+            },
+            headers={"X-Forwarded-For": ip}
         )
-        time.sleep(0.5)
+        time.sleep(0.3)
 
 
 def port_scan():
+    ip = random.choice(ATTACKER_IPS)
+
     endpoints = ["/admin", "/config", "/backup"]
 
     for ep in endpoints:
-        requests.get(f"{TARGET}{ep}")
+        requests.get(
+            f"{TARGET}{ep}",
+            headers={"X-Forwarded-For": ip}
+        )
 
 
 def credential_stuffing():
+    ip = random.choice(ATTACKER_IPS)
+
     passwords = ["admin", "password", "123456"]
 
     for p in passwords:
         requests.post(
             f"{TARGET}/login",
-            data={"username": "admin", "password": p}
+            data={
+                "username": "admin",
+                "password": p
+            },
+            headers={"X-Forwarded-For": ip}
         )
 
 
-# ---------------- SQL Injection ----------------
-
 def sql_injection():
-    requests.get(f"{TARGET}/sql")
+    ip = random.choice(ATTACKER_IPS)
 
+    payloads = [
+        "' OR '1'='1",
+        "' OR 1=1 --",
+        "' UNION SELECT * FROM users --"
+    ]
 
-# ---------------- Directory Traversal ----------------
+    for payload in payloads:
+        requests.post(
+            f"{TARGET}/login",
+            data={
+                "username": payload,
+                "password": payload
+            },
+            headers={"X-Forwarded-For": ip}
+        )
 
-def directory_traversal():
-    requests.get(f"{TARGET}/download")
 
+def directory_traversal():
+    ip = random.choice(ATTACKER_IPS)
+
+    paths = [
+        "/../../etc/passwd",
+        "/../config",
+        "/../../backup"
+    ]
+
+    for path in paths:
+        requests.get(
+            f"{TARGET}{path}",
+            headers={"X-Forwarded-For": ip}
+        )
 
-# ---------------- Full Attack Simulation ----------------
 
 def simulate_attack():
     brute_force()

env/env.py

@@ -70,10 +70,10 @@ class DeceptionEnv:
             fake_database()
             reward += 0.20
 
-        # Block attacker
+        # Block attacker (multi attacker support)
         elif action == "block_ip":
             if logs.get("suspicious_ips"):
-                ip = logs["suspicious_ips"][0]
+                ip = logs["suspicious_ips"][-1]   # latest attacker
                 block_attacker(ip)
                 reward += 0.50
                 self.done = True

env/fake_server.py

@@ -14,11 +14,16 @@ logs = {
     "requests": []
 }
 
+# Helper to extract attacker IP
+def get_ip():
+    return request.headers.get("X-Forwarded-For", request.remote_addr)
+
+
 # ---------------- Login Attack ----------------
 
 @app.route("/login", methods=["POST"])
 def login():
-    ip = request.remote_addr
+    ip = get_ip()
     username = request.form.get("username")
     password = request.form.get("password")
 
@@ -29,6 +34,14 @@ def login():
         "time": time.time()
     })
 
+    # Detect SQL injection
+    if "'" in str(username) or "--" in str(username):
+        logs["requests"].append({
+            "ip": ip,
+            "type": "sql_injection",
+            "time": time.time()
+        })
+
     if password == "admin123":
         return jsonify({"status": "success"})
     else:
@@ -44,7 +57,7 @@ def login():
 
 @app.route("/scan", methods=["GET"])
 def scan():
-    ip = request.remote_addr
+    ip = get_ip()
 
     logs["port_scans"] += 1
 
@@ -60,11 +73,11 @@ def scan():
     return jsonify({"status": "scan detected"})
 
 
-# ---------------- SQL Injection Attack ----------------
+# ---------------- SQL Injection Endpoint ----------------
 
 @app.route("/sql")
 def sql():
-    ip = request.remote_addr
+    ip = get_ip()
 
     logs["requests"].append({
         "ip": ip,
@@ -82,7 +95,7 @@ def sql():
 
 @app.route("/download")
 def download():
-    ip = request.remote_addr
+    ip = get_ip()
 
     logs["requests"].append({
         "ip": ip,
@@ -96,23 +109,50 @@ def download():
     return jsonify({"status": "directory traversal attempt"})
 
 
-# Common scan endpoints
+# ---------------- Common Scan Endpoints ----------------
 
 @app.route("/admin")
 def admin():
+    ip = get_ip()
+
     logs["port_scans"] += 1
+
+    logs["requests"].append({
+        "ip": ip,
+        "type": "port_scan",
+        "time": time.time()
+    })
+
     return "Forbidden", 403
 
 
 @app.route("/config")
 def config():
+    ip = get_ip()
+
     logs["port_scans"] += 1
+
+    logs["requests"].append({
+        "ip": ip,
+        "type": "port_scan",
+        "time": time.time()
+    })
+
     return "Forbidden", 403
 
 
 @app.route("/backup")
 def backup():
+    ip = get_ip()
+
     logs["port_scans"] += 1
+
+    logs["requests"].append({
+        "ip": ip,
+        "type": "port_scan",
+        "time": time.time()
+    })
+
     return "Forbidden", 403
 
 
@@ -229,4 +269,4 @@ def run_server():
         port=7860,
         debug=False,
         use_reloader=False
-    )
+    )