vulnerable-web-app
A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps