As we discussed in Module 2, the OWASP Foundation has developed a vulnerable web application called WebGoat that demonstrates common web application flaws and allows students to gain experience in application penetration testing. WebGoat contains hands-on exercises, tutorials, and hints. There are three sets of specific WebGoat labs this term: Module 4, Module 7, and Module 10. This is the first set. You will be doing, documenting, and reflecting on all the exercises under General, A1, A2, and A7.