S2 Lab: /dvwa/, /juiceshop/, /webgoat/