Discovering bugs takes time but can be rewarding. I conducted tests like web bug and IDOR, eventually uncovering SSRF on Hackerone. Keep!