OWASP Mantra - http://www.getmantra.com/
OWASP Mutillidae - https://www.owasp.org/index.php/Category:OWASP_Mutillidae
OWASP Top 10 - 2010 - A3: Broken Authentication and Session Management - https://www.owasp.org/index.php/Top_10_2010-A3
OWASP Top 10 - 2010 - A1: Injection - https://www.owasp.org/index.php/Top_10_2010-A1