[mazl]

First learn concepts,then check out HTB or similar sites to practice skills before using in real-world

[Fumentazo]

Try and google/learn all these ) 

• XXE (XML External Entity)
  
• SQLI
  
• XSS
  
• IDOR
  
• BAC (Broken Access Control)
  
• CI (Command Injection)
  
• SSRF
  
• CSRF
  
• Deserilizaion Vulnerability
  
• Prototype Pollution
  
• HTTP Verb Tampering
  
• SDE (Sensitive Data Exposure)
  
• Buffer Overflow
  
• PHPI (PHP Injection)
  
• LFI
  
• RFI
  
• Brute Force
  
• SSTI
  

[viceCoolMan]

Hacking a website is very difficult bro, there is no easy word, only smart people ignore the word "EASY"

Completely agree! Unlike THM and HTB you can pick websites by difficulty.

[ziscore]

hacking a website is extremely hard unless they got some massive vulnerability in  their coding

[DredgenSun]

hacking a website is extremely hard unless they got some massive vulnerability in  their coding

OR a powerful toolkit to bust it!

[supernatural]

try to do rooms of try hack me

[ahoiMatey]

Step 1: Go to college and study compsi
Step 2: get a job

[xss1]

Spend around 10 years learning after that go to college then practice practice

[waslos1123]

A good start to gain an understanding is hack the box and portswigger academy with their Tool Burp. Just click around and if you do not understand something mentioned google that and go from there. To really hack you need years of experience and need to learn a lot but start with common vulnerabilities and go from there.

[212741]

You should at least understand what is the front-end and back-end, you should be clear about some terms, such as shell, payload, poc, you should understand some common vulnerabilities, such as sql injection, xss vulnerability, deserialization vulnerability, and it is best to practice. I personally recommend hack the box