I've not seriously started but am considering it. I've only done a few toy problems myself. On the YouTube side for people who are a bit more casual like me, J

I've not seriously started but am considering it. I've only done a few toy problems myself. On the YouTube side for people who are a bit more casual like me, John Hammond and Live Overflow both seem pretty good for beginners. John has a bunch popping up on my feed where he runs through a CTF or hacking room and steps through his process, like this SQLite timing attack (https://www.youtube.com/watch?v=DYLDG_2Vs3E https://www.youtube.com/watch?v=DYLDG_2Vs3E) which I found interesting since I knew the concept but hadn't seen it in action before. Live Overflow also explains things pretty clearly and has covered a variety of topics like using Ghidra, hacking an intentionally hackable MMO, or recreating patched XSS flaws. I think it's really good to pick a niche first and stick to it, reverse engineering code looks fun but I'm not sure how commercial that skill is compared to busting open web apps. If you want something to poke and prod at there's also Damn Vulnerable Web Application (DVWA) at http://www.dvwa.co.uk/ http://www.dvwa.co.uk/