GitHub repository: mattohope/WebGoat-Legacy
Description: Legacy WebGoat 6.0 - Deliberately insecure JavaEE application