🧰 WebGoat

The items that name it 3

• nealbridges/VulnHunter
  repoas affected products2026-09-22

  public target used as example ground-truth corpus for benchmarking VulnHunter

• awesome-osint-arsenal
  repoas tools2026-07-31It is written here as WebGoat (vulnerable practice app).

  vulnerable practice app

• Benchmarking Endor Labs AI SAST: 2.6x more real vulnerabilities found than frontier models | Blog | Endor Labs
  articleas affected products2026-07-06It is written here as WebGoat: authentication bypass in account-verification check; two arbitrary keys pass and both real checks are skipped.