GitHub repository: shaimael/play-webgoat
Description: A vulnerable Play application for attackers.