GitHub repository: pedrocodacy/play-webgoat
Description: A vulnerable Play application for attackers.