OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
UNESCO World Heritage Site Visits - Sean Clarke