If you look at https://owasp.org/www-project-vulnerable-web-applications-directory/ https://owasp.org/www-project-vulnerable-web-applications-di... and click th

If you look at https://owasp.org/www-project-vulnerable-web-applications-directory/ https://owasp.org/www-project-vulnerable-web-applications-di... and click the "offline" tab you'll see a load of apps there.