@webgoat.org will be send to this mailbox.

Only the user part is important the domain can be anything

1 50 of

This tab is empty.
Why the name "WebGoat"? Developers should not feel bad about not knowing security. Even the best programmers make security errors. What they need is a scapegoat, right? Just blame it on the 'Goat!
This tab is empty.