What resources would you recommend to learn Web app pentesting?

Hey y’all, I’m a cs student who is into web development and was looking to pick up web app pentesting as a hobby that can also help my career. I’m familiar with HTML/CSS, JavaScript, Java, and SQL. any recommendations? The resources don’t have to be free as long as the quality is valid

app can career css cybersecurity development don free hey html java javascript learn pentesting recommendations resources sql student web web app web development