For people who would like to practice and learn individual vulnerabilities in web apps, instead of tackling a whole DVWA or JuiceShop, there's SKF Labs.
->
https://github.com/blabla1337/skf-labs
Every vulnerability on that list has its own, dedicated Docker container for practice. Plus a walkthrough.
