Hacker News new | ask | show | jobs
by v3nom 2247 days ago
Try sites like HackerOne where you will get a framework for ethically looking for vulnerabilities in public software. Since you seem to know the lingo and top issues on the web, try to find your first XSS on a website. The first one will take some time, but once you find one you will feel the rush of accomplishment. The second one will be easier to find and you will start noticing patterns in what to look for for.