While I wrote the articles about how to start a pentesting career I came accross more great resources that I did not mention before, so here they are. Most of it is hands-on :).
The Complete Beginner Network Penetration Testing Course for 2019
CTP/OSCE Prep – Wrapping Up Our Prep
Article with OSCE resources.
https://h0mbre.github.io/CTP_Summary/#
Web Application Exploits and Defenses
Online Webapp hacking.
https://google-gruyere.appspot.com/
XSS challenges
Online XSS challenges.
http://xss-quiz.int21h.jp/
XXE Lab
XXE Lab for downloading and hacking.
https://github.com/jbarone/xxelab
Root Me
Hacking challenges online.
https://www.root-me.org/
Cryptopals
Crypto hacking CTF.
https://cryptopals.com/
RingZer0 CTF
https://ringzer0ctf.com/challenges
Damn Vulnerable Web Application (DVWA)
Vulnerable weeb hacking VM (download).
http://www.dvwa.co.uk/
Pentesterlab
List of the free Webapp hacking excercises.
https://pentesterlab.com/exercises?dir=desc&only=free&sort=published_at
Link List with more CTFs and excercises
https://wheresmykeyboard.com/2016/07/hacking-sites-ctfs-wargames-practice-hacking-skills/
Kali Training
https://kali.training/
Vulnhub
Loads of challenges and VMs (downloads).
https://www.vulnhub.com/
We learn Security! 