A great free platform to learn web security is Burp Suite Academy. I worked through some of the academy modules to learn some web security basics
Here is some of my lab progress from the academy:
