WattzGOAT

WattzGOAT is an intentionally vulnerable web application designed for security training and capture-the-flag style exercises. It simulates a smart meter company with a customer portal and admin side, containing 48 hidden security weaknesses based on real-world issues like the OWASP Top 10. It runs as a single Docker container and allows users to practice finding and exploiting vulnerabilities in a safe environment.