v1.0.0 - Vulnerable lab

Vulnerable baseline of the Breaking Python Lab (main branch).

Contains 10 intentional web vulnerabilities for hands-on AppSec/OffSec training:
SQL injection (CWE-89), command injection (CWE-78), path traversal / LFI (CWE-22),
XXE (CWE-611), reflected XSS (CWE-79), SSTI (CWE-1336), insecure deserialization
via pickle and yaml.load (CWE-502), SSRF (CWE-918), and broken access control /
IDOR (CWE-639).

Run exploits/poc.py against it: it reports 10/10 findings. Not every challenge
hides a literal FLAG{...} — see the Flags table in the README. Educational use
only; run locally in an isolated environment, never expose it to the Internet.