rajesh-sangepu/webgoat

WebGoat is an intentionally vulnerable web application for learning web security and penetration testing. A learner registers or logs in, browses a lesson menu, submits exercise requests, receives feedback, and tracks completion. The source tree also shows WebWolf, a companion application, and lessons spanning authentication, access control, injection, cryptography, and other security topics. The graph highlights the lesson runtime and progress/reporting layers; most lesson-to-container wiring is not shown in the excerpts, so those relationships are omitted or marked unverified.