Someone wanted to learn this too, so Grasp built them a personal learning path.
You can keep exploring this one or create a path like this one shaped around you.
Recommended resources
Module 2
Essential jQuery for ASP.NET Developers
Module 3
Understanding Cross-Site Scripting (XSS)
Module 4
Mitigating Cross-Site Scripting (XSS)
Module 5
Preventing SQL Injection (SQLi)
Module 6
Preventing Cross-Site Request Forgery (CSRF)
Module 7
Secure Authentication and Session Management
Module 8
Fixing Broken Access Control
Module 9
Preventing Sensitive Data Exposure
Module 10
Mitigating Insecure Deserialization
Module 11
Hardening Application Configuration
Module 12