@Kipp I'm anchoring on _Web Application Hackers Handbook_, so if web apps are your jam, take a gander at the Practical Web Application Security and Testing class at https://academy.tcm-sec.com. It's very accessible and comes with a Discord invite that's been a good place to dwell. I'm also a fan of _Hacking APIs_ by Corey Bell, I liked the labs he walks the reader through.
@scottlink ah brill, will take a look. I've seen the Hacking APIs book advertised. Gotta love a no starch press hacking book amiright