More WebGoat, two sub-technique demonstrations from ATT&CK framework, ATT&CK framework tactics explained with examples of a subtechnique for each tactic, XSS story