A really really long list (in no particular order) of training materials, CTFs and websites to test your skills. Hacksplaining: Security Training for Developers Hack real, vulnerable web applications