From pentesterlab.com a really useful resource to learn about web pentesting.https://pentesterlab.com/web_for_pentester.html