Where is the best place or best resources to start learning ethical hacking for web development security?

I am aware of owasp and their GitHub project WebGoat and NodeGoat.

Do you think this is sufficient knowledge for web development security or do you have any other additional recommendations?