GitHub repository: JoeFerrin/hackable-python
Description: A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks