DVWA with multiple security levels - OWASP Juice Shop (simulating ShopStack-like functionality) - Custom vulnerable web applications