WebGoatPHP
OWASP port of WebGoat to PHP and MySQL/SQLite. Interactive teaching environment for web application security with lessons as challenges; users exploit the vulnerability to demonstrate understanding. Modes: single, workshop, contest, secure coding.
Collections offline
Technology PHP MySQL SQLite
Categories Guided lessons Single-player
Author OWASP
Stars 
Last contribution Apr 28, 2025 < 2y
Notes
Clone to document root; import SQL/webgoat.php; set DB in app/config/application.php. Default guest/guest. Refresh list to show new lessons.