Learn the fundamentals * HTTP * Browsers (function, security constraints, ect) * Web architecture (APIs, reverse proxy, cloud, ect) * Server-side (APIs, MVC structure, routing and handlers) * Client-side (JS, HTML, CSS) scrip * Basic Linux and Bash scripting Learn basic bug types ( Start with simple Access Control bugs like IDOR) Don't just learn, practice what you have learned. Use resource like portsigger web academy, YouTube channels like LiveOverFlow You can check this tweet for more [https://x.com/Rhynorater/status/1699395452481769867] You can ask me if you want more resources, or anything specific you want (elaborate and specify your question please)