GitHub repository: veracode-qa/verademo
Description: A deliberately insecure Java web application