OWASP Juice Shop: Probably the most modern and sophisticated insecure web application - juice-shop/juice-shop