WebGoat

Tech stack & purpose

WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons through demonstrations of common server-side application flaws and penetration testing techniques. Built in Java with the Spring Boot framework, it can be run via Docker, as a standalone jar file, or from source code. The project is intended for educational purposes to help people learn about application security vulnerabilities in a controlled environment.

Languages

Contributors (top 30 of 183)

• Nanne Baars930 commits
• 
  dependabot[bot]269 commits · 0 followers
• Jason White264 commits
• mayhew64224 commits
• rogan.dawes130 commits
• René Zubcevic114 commits
• Doug Morato113 commits
• mayhew64@gmail.com84 commits
• wirth.marcel84 commits
• nbaars77 commits
• Àngel Ollé Blázquez65 commits
• ch.ko12346 commits
• esheri344 commits
• Benedikt - Desktop42 commits
• misfir337 commits
• sherif.fathy35 commits
• Bruce Mayhew34 commits
• Nanne31 commits
• Rene Zubcevic29 commits
• lawson8927 commits
• white.tiger.russia@gmail.com26 commits
• Rick Lawson23 commits
• Max Geldner22 commits
• Jeroen Willemsen18 commits
• Matthias Grundmann17 commits
• Elie De Brauwer17 commits
• Dave16 commits
• PhilippeSteinbach16 commits
• diver-sity16 commits
• 
  Jason15 commits · 65 followers