GitHub repository: ktsim/WebGoat-Legacy
Description: Legacy WebGoat 6.0 - Deliberately insecure JavaEE application