# تنظیمات سایت قربانی (Laravel)
server {
    listen 80;
    server_name victim.lab;
    root /var/www/html/public;
    index index.php;
    location / { try_files $uri $uri/ /index.php?$query_string; }
    location ~ \.php$ {
        fastcgi_pass php:9000;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }
}

# تنظیمات سایت مهاجم (Static/Hacker)
server {
    listen 80;
    server_name attacker.lab;
    location / {
        proxy_pass http://hacker-app:80;
    }
}