2 repositories on SrcLog
Damn Vulnerable Web Application (DVWA)
A lab to play with authentication and authorisation problems