TryHackMe + portSwigger web security academy tavsiye ederim.