GitHub repository: l-mh-95/play-webgoat
Description: A vulnerable Play application for attackers.