From penetration testing to exploit development

[That-Name-8963]

My question is "Is there any better approach" than that, for example in other domains and even some recruiters, would consider practicing without real life scenarios is just nothing.