http://www.kitploit.com/2018/05/owasp-juice-shop-intentionally-insecure.html
OWASP Juice Shop - An Intentionally Insecure Webapp For Security Trainings Written Entirely In Javascript