We will be using DVWA (Damn Vulnerable Web Application) as a platform to learn the basics of Website attacks such as SQL Injection, Cross Site Scripting (XSS), and various other forms of basic vulnerabilities that can exist in insecure sites.
You will want to have a Virtual Machine with Metasploitable 2 installed, which you can download Here. If you don't know how to install it, you can refer to this page.
You will also need to have Kali Linux Installed as a VM as well. You can download it here, and follow this guide to install it.
This lab is suitable for Novice hackers. More advanced topics can be built upon the foundations that this lab sets forth.