Insecure web application used to test system security controls