# cra-vuln-demo
Deliberately vulnerable Python app for testing CRA control-tagging.
Hardcoded creds, weak crypto, SQLi, command injection, cleartext HTTP.