GitHub repository: susanstdemos/play-webgoat
Description: A vulnerable Play application for attackers.