GitHub repository: thaadur/WebGoat-Legacy
Description: Legacy WebGoat 6.0 - Deliberately insecure JavaEE application