Another good one: https://owasp.org/www-project-juice-shop/