Someone wanted to learn this too, so Grasp built them a personal learning path.
You can keep exploring this one or create a path like this one shaped around you.
Recommended resources
Module 1
Foundational Web Concepts
Module 2
Networking and HTTP for Hackers
Module 3
Reconnaissance and Information Gathering
Module 4
Exploiting Cross-Site Scripting (XSS)
Module 5
Injection Vulnerabilities
Module 6
Authentication and Access Control Flaws
Module 7
Server-Side Vulnerabilities
Module 8
API Security Fundamentals
Module 9
Advanced Web Vulnerabilities
Module 10