flask-webgoat is a deliberately-vulnerable application written with the Flask web framework. - View it on GitHub