I am getting this problem at the time of running command java -jar webgoat-server-8.2.2.jar --server.port=8000 --server.address=localhost .

kindly help me thank you !

Exception in thread "main" java.lang.UnsupportedClassVersionError: org/owasp/webgoat/StartWebGoat has been compiled by a more recent version of the Java Runtime (class file version 59.0), this version of the Java Runtime only recognizes class file versions up to 55.0
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
at java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
at java.base/java.net.URLClassLoader.defineClass(URLClassLoader.java:550)
at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:458)
at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:452)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:451)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:588)
at org.springframework.boot.loader.LaunchedURLClassLoader.loadClass(LaunchedURLClassLoader.java:151)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:521)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:398)
at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:46)
at org.springframework.boot.loader.Launcher.launch(Launcher.java:107)
at org.springframework.boot.loader.Launcher.launch(Launcher.java:58)
at org.springframework.boot.loader.JarLauncher.main(JarLauncher.java:88)

@mohdadil2001 you are using a JDK-11 to run WebGoat, you need at least JDK-17 or higher.

Hello, I am wondering if there is an "official" list of all intentionally programmed WebGoat vulnerabilities. This list would serve as a reference point for testing tools to measure their success in finding vulnerabilities.

Hello, I am novice here. I have passed Web goat HTTP Proxies lesson and I do not get the purpose of it:

• Is it just the explanation of how to change parameters?
• What expected result from server after the parameters changed
• I have noticed that I could finish the lesson in browser without proxy interruption with ZAP) here

I want more explanation of this lesson. Thanks

Hello. Can you please explain to me in what ways is this app different fron Juice Shop that I must cut the internet connection when testing this thing but I found no such warning anywhere for Juice Shop? Both are "bad" examples of vulnerable apps, both ran from docker images, so I don't really understand. I'd really prefer to have such handy tool as the net available while I test, hence the question.