Ah yes we used this and BadStore in the web security course of my university. Not very hard, but good for beginners.