This site was shared with me today where you can practice your security chops and learn about web vulnerabilities: http://overthewire.org/wargames/natas/
I’ve got to natas3 so far and it’s super fun!! You don’t need anything except a browser and internet access to complete the challenges. No need to SSH. Try it out and see how far you can get. They have an IRC channel for questions/comments when working through the challenges.