vulnhub.com for vulnerable distributions. They have some distributions setup with WebApps designed for you to practice and learn various attack from.(I.e WebGOAT)
Self-Promo: rmusser.net/infosec site full of information on various infosec topics. Going through right now and updating/increasing the quality of information.
OWASP(Open Web Application Security Project)
OWASP Top Ten: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje...
OWASP Testing Methodology manual: https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table...
OWASP Developer Guide: https://www.owasp.org/index.php/Category:OWASP_Guide_Project
PTES(Penetration Testing Execution Standard): http://www.pentest-standard.org/index.php/Main_Page
CTFs: overthewire.org
Self-Promo: rmusser.net/infosec site full of information on various infosec topics. Going through right now and updating/increasing the quality of information.