test case is
here
DVWA is
here
mutillidae II is
here