Offensive Security has few courses that might be interesting.

WEB-300 course in particular https://www.offensive-security.com/awae-oswe/ It shows how vulnerabilities are found using code review and how to exploit them in lab environment.

There's a subscription based model for $2000 where you can pick a course and work on it for a whole year https://www.offensive-security.com/learn/