There used to be some website I used in the late 2000s, early 2010s that taught you some penetration techniques. JS and SQL injection, looking at page source for vulnerabilities, etc. Although I can't seem to find it anymore, the name was something along the lines of The Enigma Project I think. It's just a browser based thing where you attack their website. I'll look some more later and see if I can find it again.