GitHub repository: static-prod-verify/verademo
Description: A deliberately insecure Java web application