The goal of this thesis is to design and implement a tool for generating vulnerable web applications for cybersecurity training. The student will map existing open-source solutions and develop a generator that produces a containerized application vulnerable to SQL injections or authorization flaws. The generator will allow users to configure various parameters to control the security level of the created application. The generator will support reusing the created application for student assessment or competitions by randomizing some variables and code blocks. Additionally, it will generate a script for verifying the implemented vulnerabilities and application features. Finally, the student will assess the generator’s applicability in preparing an Attack/Defense Capture the Flag (CTF) competition and document key insights and lessons learned.