WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The ...

The WebGoat Lesson Server, is currently UNDER MAJOR DEVELOMENT. As of February 1st 2016, the version "7.0.1" is considered the first STABLE version of a major architecture and UI changes. Older/Legacy ...