The hands-on OWASP Top 10 training box includes all what you need to have solid web hacking skill.
OWASP WebGoat is one of the best maintained vulnerable web applications. It is written in Java, which is widely used by big companies.
OWASP Juice Shop is a modern single web application. It includes all modern technologies: Angular, NodeJs, MongoDB, etc
The lab includes docker to help you easily install tools in the during the OWASP Top 10 training. It includes Go to help installing hacking tools.