juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application