WebGoat

WebGoat is an educational platform designed to teach cybersecurity and web application security by providing intentionally vulnerable web applications. Users can safely explore and learn about common security flaws—such as SQL injection and cross-site scripting—by practicing their skills in a controlled environment. It helps developers, security professionals, and students understand how vulnerabilities work, how attackers exploit them, and how to implement effective security measures to protect real-world websites and applications.