Pen test results for testing this application.
You can find the findings here: https://github.com/BounceSecurity/WebGoat-Legacy-PenTest/issues
There is a copy of the OWASP ZAP session file here: https://github.com/BounceSecurity/WebGoat-Legacy-PenTest/WebGoatLegacyHosted.zip