Hi, all!

Does anybody know good vuln apps/projects for (like test examples for lint) testing code review tools like rats and lint?

Well, if you wanna play with those low-level findings tools, you could look at the http://samate.nist.gov/SRD test cases...
Just be aware that those do not represent real applications, it's too much synthetic.

Otherwise, go to CVE, pick a project, not too big, with lots of vulns, and run the tools on it... you can then correlate results from tools (weaknesses) with vulns.

nEUrOO -- http://rgaucher.info -- http://twitter.com/rgaucher

Check Out : OWASP-Webgoat it is vulnerable application created by OWASP. to find vulnerabilities and exploit it.