most people donโt fail to learn web 3 security. They fail to decide.
1) dude, make working 2-4 hours rational, not romantic.
Love of the stuff gets you started; logic keeps you in the game. Pick one thing, (e.g Solana and Rust, solidity + EVM) and one outcome (find 1 real bug in a public repo). stop everything else. I did that 1 year ago.
2) failing is part of our job.
โNo ideaโ โno timeโ โNo moneyโ โNo mentor,โ โNo confidence.โ cool. AnticiPate it, plan around it, keep moving.
3) kill the five excuses
Time: You donโt need more hours; you need fewer distractions. Do 60 minutes/day, timer on, phone in another room. grow from there.
money: Free repos, free write-ups, free CTFs exist. Pay later if you want speed; start now regardless. Check Solodit, Rareskills, Cyfrin Updraft.... etc
Fit: โIโm not technical enough.โ You will be technical, bro, after 20 focused sessions. Not before. dig deep first.
Authority: Stop asking the timeline for permission. Ask for feedback after you ship a PoC.
Avoidance: โIโll think about it.โ No. Decide: 30-day sprint, or donโt do it at all.
4) learn like a small boy
every bug starts as a dumb question: โWhat happens if this state flips between calls?โ Keep asking until the code taps out.
5) record everything.
screen-record audits. Hot streaks have patterns (where you paused, what you probed). Rewatch your hot tape. iterate. May be write in a book or a journal on the wall.
6) build the trust bridge (with yourself)
Do you believe this process will make you better?
Do you trust your plan enough to execute it for 30 days?
Do you believe it will work for you, not just for โsmart peopleโ?
If any answer is โno,โ fix that first; tools wonโt save your doubt
why do you want to be a security researcher? will you make more money to buy your mum her house? do you want to marry? do you want to own your car? whatever..
7. direction > perfection.
Your first wins are tiny: a failing test, a weird invariant, a reproducible edge case. stack them. Directionally right beats eternally waiting for โthe perfect course.โ
8) New identity, new priorities.
Youโre the kind of person who reads code daily, writes tests, and proves claims. Spend time/money accordingly. If it doesnโt move you toward โfind 1 bug,โ cut it.
9) Mini-playbook (30 days):
Days 1-3, Environment + repo anatomy. Read one protocol end-to-end; map state variabless & trust boundaries.
Days 4-10: Attack surface: auth, price oracles, reentrancy, rounding, share accounting, upgrade hooks. Write one failing test per vector.
Days 11-20: Deep study 1 module. threat-model it. Try to break invariants. Document every failed attempt (gold for future you).
Days 21-27: Pick one credible vulnerability pattern; hunt it across two more repos.
Days 28โ30: Package findings: minimal PoC, impact, fix suggestion, reproducibility. Publish or submit where appropriate.
10) Commit line (copy-paste this somewhere visible):
โIndecision is a decision. Iโm choosing progress for 30 days. One hour. Every day. No Excuses.โ
Just do the work and post your learnings. If it helps, youโll know, because your code will start bleeding less. If you have any question my dm is open.
@40sp3l Nice of you to share your journey. This has been helpful. In a nutshell, stay consistent. I only recently made the decision to follow this route career-wise. So far I have learnt a ton and I will remain teachable no matter how many successes I record. Thanks bro!
OSCP Preparation Guide 2025๐๐พ๐ฅ
OSCP-Resources by Verylazytech
https://t.co/UKaqx8Clp9
How I Prepared & Passed OSCP in 3 months by Prajit Sindhkar
https://t.co/03bjqcnYCQ
OffSec OSCP Exam with AD Preparation (Newly Updated)
https://t.co/m9lrKZU9tU
The Worldโs First OSCP+ Exam Review by Tunahan Tekeoฤlu
https://t.co/KAHaQ26sWt
OSCP-CPTS-PNPT Preparation live classes ย ( Language: Hindi ) by The Cyber Research
https://t.co/4rrcK7gO7e
Active Directory Map Attack by Benheater
https://t.co/fpG1PqeFDX
Mastering Active Directory OSCP 2024 FULL COURSE by LookInsideOur
https://t.co/AzsTEZ0kkL
Mastering the OSCP Certification: Exam Review & Preparation by Simon Synnes
https://t.co/0z6QhrkXxe
OSCP Active Directory Notes
https://t.co/RFc2a2TZEe
Windows Privilege Escalation - Full Course by Hexdump
https://t.co/XuoVw493bE
OSCP+: Step-by-Step Guide to Success by Astik Rawat
https://t.co/e1XfSNPJmG
OSCP Guide by Jorkle
https://t.co/E9dlYqocJk
How to Pass the OSCP in 2024 by Cyber with Vic
https://t.co/GGshINe23N
reference: LinkedIn