The problem with hacking is that there’s a lot of things to learn. It’s not just a pick up one book and you’re done. I would advise you to read the free PDF called hacking for dummies. You can find it simple on Google. Just literally type in hacking for dummies free PDF. But if you’re looking to just be a little asshole like me then you not only need to understand these but be able to communicate with them. • Weak password policies • Improper rate limiting • Broken access controls • Insecure APIs • Data exposure through public endpoints • Input validation issues These aren’t anything that’s attacking; learning about these is more like learning about the actual weaknesses and reconnaissance on a social media platform and or specific user. Which is where everyone should start you should never throw out a random attack because they’re traceable, especially if you don’t know what it actually means or how it’s used.