@WebGoat

OWASP WebGoat

Deliberately insecure JavaEE application to teach application security

  • WebGoat 8.0

    JavaScript 2,004 764 1 issue needs help Updated Oct 7, 2018
  • Legacy WebGoat 6.0 - Deliberately insecure JavaEE application

    Java 262 172 Updated Aug 4, 2018
  • 7.x - The WebGoat STABLE lessons supplied by the WebGoat team.

    HTML 104 76 Updated Dec 18, 2017
  • 2 Updated Nov 11, 2017
  • WebGoat 5.4 releases and older

    6 3 GPL-2.0 Updated Aug 21, 2015
  • POC for dynamic groovy/thymeleaf based lesson system

    Java 3 3 Updated Feb 2, 2015