OWASP WebGoat

OWASP WebGoat is a J2EE web application designed to teach web application security lessons. It features categorized and realistic environment with hints and code snippets.