I'm not a security expert at all, but I was wondering if Google Gruyere[0] was a worthwhile resource/training exercise...

[0] https://google-gruyere.appspot.com/