Skip to content
@WebGoat

OWASP WebGoat

Deliberately insecure JavaEE application to teach application security

Popular repositories Loading

  1. WebGoat WebGoat Public

    WebGoat is a deliberately insecure application

    JavaScript 8.5k 6.8k

  2. WebGoat-Legacy WebGoat-Legacy Public

    Legacy WebGoat 6.0 - Deliberately insecure JavaEE application

    Java 327 413

  3. WebGoat-Lessons WebGoat-Lessons Public

    7.x - The WebGoat STABLE lessons supplied by the WebGoat team.

    HTML 159 106

  4. WebWolf WebWolf Public

    10 4

  5. WebGoat-Archived-Releases WebGoat-Archived-Releases Public

    WebGoat 5.4 releases and older

    8 12

  6. groovygoat groovygoat Public

    POC for dynamic groovy/thymeleaf based lesson system

    Java 3 3

Repositories

Showing 6 of 6 repositories
  • WebGoat Public

    WebGoat is a deliberately insecure application

    WebGoat/WebGoat’s past year of commit activity
    JavaScript 8,524 6,789 31 (6 issues need help) 3 Updated Oct 7, 2025
  • WebWolf Public
    WebGoat/WebWolf’s past year of commit activity
    10 4 1 0 Updated Jul 10, 2024
  • WebGoat-Legacy Public

    Legacy WebGoat 6.0 - Deliberately insecure JavaEE application

    WebGoat/WebGoat-Legacy’s past year of commit activity
    Java 327 413 14 21 Updated Mar 27, 2024
  • WebGoat-Lessons Public

    7.x - The WebGoat STABLE lessons supplied by the WebGoat team.

    WebGoat/WebGoat-Lessons’s past year of commit activity
    HTML 159 106 1 5 Updated Oct 12, 2020
  • WebGoat-Archived-Releases Public

    WebGoat 5.4 releases and older

    WebGoat/WebGoat-Archived-Releases’s past year of commit activity
    8 GPL-2.0 12 0 0 Updated Aug 21, 2015
  • groovygoat Public

    POC for dynamic groovy/thymeleaf based lesson system

    WebGoat/groovygoat’s past year of commit activity
    Java 3 3 4 0 Updated Feb 2, 2015

Most used topics

Loading…