Damn Vulnerable Java Application (DVJA)
Damn Vulnerable Java (EE) Application for security testing and learning. Run via Docker Compose (http://localhost:8080), Maven Jetty, or deploy WAR to Tomcat.
Notes
Requires Java 1.7+, Maven 3.x, MySQL. Configure database in src/main/webapp/WEB-INF/config.properties; import db/schema.sql.