If an empty/faulty .extract folder exist where you execute the jar (e.g. from a previous failed attempt), you get a FileNotFoundException looking for .extract/webapps/WebGoat.war. This caused me a lot of headache finding out, and would be nice if it could be documented or fixed.