Learner, figuring out how to become a web app security researcher

Abe Bormate — Wed, 11 Nov 2026 08:08:20 +0000

Folks, I feel like any other field, regardless what branch in cybersecurity, or up to broader umbrella, computer IT. It is a challenge sometimes knowing where, and how to start learning something.

For me, since I stumbled across very good e-learning websites. Try Hack Me (THM), and Hack The Box (HTB). With me initially grokking modules from THM. I feel I'll focus on HTB. Presently, on a free unpaid subscription, a free account where I'm learning from. I find gives me enough room to very slowly, maybe painstakingly learn and study my way going through a learning path.

A path HTB calls, a path to becoming a "Web App Penetration Tester". Personally, I want to call it becoming a security researcher. I don't have much knowledge, or experience with this field yet, my friends. Although, I have been dabbling a little inside this space for a while. I don't feel well versed yet.

Aside HTB's learning path. I find an old book, to be most helpful in learning in further breadth.

The Web Application Hacker's Handbook. An ageing resource, but may I say beautifully written. With the author making the language and thus the technical concepts more accessible. For beginners such as myself. Thank you!

Folks, I have much ground to cover.

Truth be said, I have much to learn.

What time I could put in for this endeavor. I will, my goal is either become employable (to find a job at an office). Or, to help do this kind of work as a freelance service provider. May God help me.

It's a skill that could be grown, I feel. A collection of practices and knowledge that can be learned and obtained gradually. Yes, my friends?

Alright.

For today, 11th of November 2026.

With the grace of God, through His grace, I was finally able to finish my third module from HTB's web-app pentesting learning path.

I find it enjoyable, but, truthfully, I wish there was more breadth and guidance at times.

However, it could also be a good thing. Their way of teaching their learners and students.

For now, I'll rest for a while.

Then later on, will start learning off a fourth module.

Friends, I can't pay for a subscription at this time. I'm sorry.

However, I find that HTB is gracious enough. That the cubes that accumulated is just enough (I think, and I hope) to finish this learning path's modules.

Although, yes, without resulting into a shiny certification. Those things are all well and good, but it's expensive. I'll perhaps go through one once I could already. Perhaps, if God is willing, I'll do so in the future.

My friends, for now, I feel I have to focus on growing and learning the fundamentals and core skills necessary.

The certification can wait. First, I need to grow basic skills, and obtain fundamental knowledge.

Alright, I feel that's mostly it for now.

Thanks!

Keep yourselves well, my brothers and sisters.

God bless you.

Peace be with you, all.

DEV Community: Abe Bormate

Learner, figuring out how to become a web app security researcher