Show HN: WattzGOAT – an intentionally vulnerable web app for security training https://ift.tt/w8KpmH3

Show HN: WattzGOAT – an intentionally vulnerable web app for security training Built this as a hands-on lab for teaching web application security. It is a fictional electricity utility's customer portal with 48 deliberately planted flags (most of OWASP Top 10) you find and exploit CTF-style, including a simulated (rule-based, not a real model) AI assistant with its own prompt-injection-style vulnerabilities. Full disclosure, built this with AI assistance but I promise you're going to enjoy tinkering with it. https://ift.tt/Zg7ntYv September 30, 2026 at 11:31PM