jika dulu menggunakan PHP , web application yang satu ini menggunakan J2EE. dilihat dari ukurannya aplikasi yang satu ini lebih lengkap.
silahkan download di:WebGoat is a deliberately insecure J2EE web application designed to teach web application security lessons. In each lesson, users must demonstrate their understanding of a security issue by exploiting a real vulnerability in the WebGoat application. For example, in one of the lessons the user must use SQL injection to steal fake credit card numbers. The application is a realistic teaching environment, providing users with hints and code to further explain the lesson.
Code: Select all
http://code.google.com/p/webgoat/downloads/list