Note
A new version of the software is at https://github.com/OWASP/iGoat-Swift/
From : https://github.com/OWASP/igoat?tab=readme-ov-file
iGoat is a learning tool for iOS developers (iPhone, iPad, etc.) and mobile app pentesters. It was inspired by the WebGoat project, and has a similar conceptual flow to it.
As such, iGoat is a safe environment where iOS developers can learn about the major security pitfalls they face as well as how to avoid them. It is made up of a series of lessons that each teach a single (but vital) security lesson.