Awesome

damnvulnerable.me

A deliberately vulnerable modern day app with lots of DOM related bugs