Check out the port swigger academy online and hackthebox as locations to learn. Offensive Security’s proving grounds also has good content.