GitHub repository: vulnerable-apps/verademo
Description: A deliberately insecure Java web application