This is a defunct code base. The project is located at: https://github.com/WebGoat - OWASP/WebGoat..