Lab Environments
OWASP WebGoat
Deliberately insecure app teaching common web flaws lesson-by-lesson.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Guided learning path for web security concepts.
How
Start container; complete lessons in browser.
Why
Lesson structure is excellent for fundamentals.
Commands & usage
docker run -p 8080:8080 -p 9090:9090 webgoat/goatandwolf
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Tags
Related in Lab Environments
Metasploitable 2/3
Intentionally vulnerable Linux/Windows VMs for exploit practice.
DVWA
Damn Vulnerable Web Application for learning OWASP bugs.
OWASP Juice Shop
Modern insecure web app with gamified challenges.
VulnHub
Free downloadable vulnerable machines for offline practice.
Hack The Box
Online pentest labs with machines, challenges, and careers path.
TryHackMe
Guided cybersecurity learning rooms and hands-on labs.