Practice, and having supernatural perseverance (although probably not in that order) I'd guess the curriculum is half reverse engineering and half reading any

Practice, and having supernatural perseverance (although probably not in that order) I'd guess the curriculum is half reverse engineering and half reading any write-ups to see the attacks and areas of attack for inspiration