For theoretical materials, quizzes, vulnerability descriptions, walkthroughs with practical challenges, I recommend my project API Security Champion. An intentionally vulnerable API service designed ...