Add files via upload

command_injection_vuln.py

@@ -0,0 +1,11 @@
+# command_injection_vuln.py
+import os
+
+def ping_host(host):
+    # Vulnerable to command injection
+    command = f"ping -c 1 {host}"
+    os.system(command)
+
+if __name__ == "__main__":
+    target = input("Enter host to ping: ")
+    ping_host(target)

hardcoded_secret_vuln.py

@@ -0,0 +1,11 @@
+# hardcoded_secret_vuln.py
+
+# Hardcoded secrets
+API_KEY = "sk_test_1234567890abcdef"
+DB_PASSWORD = "SuperSecretPassword123!"
+
+def connect():
+    print("Connecting with password:", DB_PASSWORD)
+
+if __name__ == "__main__":
+    connect()