GitHub repository: unsafecode/verademo
Description: A deliberately insecure Java web application