OWASP Web Goat

Description
WebGoat is a deliberately insecure web application designed for learning and practicing web application security testing. It includes many common web application vulnerabilities and attacks.
Function
Vulnerable Web App