infosec4all.com

From Google code:

Web Application Exploits and Defenses

A Codelab by Bruce Leban, Mugdha Bendre, and Parisa TabrizThis codelab shows how web application vulnerabilities can be exploited and how to defend against these attacks. The best way to learn things is by doing, so you’ll get a chance to do some real penetration testing, actually exploiting a real application.