init: deliberately vulnerable demo (CWE-798/327/89/78/319)

crypto.py

@@ -0,0 +1,9 @@
+import hashlib
+from Crypto.Cipher import DES
+
+def weak_hash(data):
+    return hashlib.md5(data.encode()).hexdigest()   # weak hash (CWE-327/328)
+
+def encrypt(data, key):
+    cipher = DES.new(key, DES.MODE_ECB)              # weak cipher (CWE-327)
+    return cipher.encrypt(data)