Here are some resources I have found useful (:

 

Fundamentals:

The Magic of the Terminal: https://missing.csail.mit.edu/

SSH Tunnels: specterops guide to ssh tunnels

 
 
 

Web

Portswigger Web Academy: https://portswigger.net/web-security

Damn Vulnerable Web App: https://github.com/digininja/DVWA

Web Goat Vulnerable web app: https://owasp.org/www-project-webgoat

Mutillidae Vulnerable web app: https://github.com/webpwnized/mutillidae

 

Metasploit

Metasploit Unleashed Class: https://www.offensive-security.com/metasploit-unleashed

Metasploitable vulnerable target: https://github.com/rapid7/metasploitable3