If you are interested in web pentesting, learn to hack Webgoat and DVWA. From there go after live sites via a bug bounty platform (I like Bugcrowd.) It is hard

If you are interested in web pentesting, learn to hack Webgoat and DVWA. From there go after live sites via a bug bounty platform (I like Bugcrowd.) It is hard to overstate the value of the chance to test (and demonstrate) your skills against a live production site.