30

Which of the following statements is true?


WebGoat is maintained by OWASP.


WebGoat has 30 or so "lessons" embedded to display how security vulnerabilities work on a system.

It is maintained by OWASP, can be installed on virtually any platform, works well with Java and .NET, and provides the perfect "black box" testing opportunity for new, and seasoned, pen testers to practice on without fear of breaking something.