Firing Range is a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
It can be deployed as a Google App Engine application. A public instance is is running at http://public-firing-range.appspot.com.
See the LICENSE file.