Not exactly the same but https://portswigger.net/web-security has several good lessons and labs about specific attacks.