I learned most security related stuff from practicing breaking into CTF boxes. Watch how it is done by a professional pentester ippsec: https://www.youtube.com/@ippsec