EvilZone

I have a feeling you are going to have a very bad time with questions like such. Anyway, I'm not a hacker myself i.e penetration testing, and all that isn't my business. But all that I would suggest you if you want to 'practice'  penetration testing is setting up a sandbox. An environment where nobody gets hurt. Say two or more computers on a LAN with different operating system, that is for penetration testing or whatever they call it.
For practicing your web hacking like Cross site scripting/ SQL injections, install an apache server(Wamp I would recommend). Write an insecure website on your own and try exploiting it, then when you successfully do it, secure it and try exploiting again, and so on. Later on you can practice your skills on other 'local' websites , like that of some state agents or school websites. It will be fun.
This is such an example site, of a  school where I had studied in the past.
bck.edu.pk
I had a friend help me with it( he was a skiddy but knew his tools well) and we uploaded a shell(that he said he had written which he clearly hadn't) and changed the Prinicipal's picture to Sasha Grey's. It was hysterical, and we did it when at the end of sessions when they were opening admissions and people were unintentionally DDosing their website for contact information.
Anyway, goodluck.