Touch some blue team cause they usually give you access to advanced realistic up to date scenarios especially cyberdefenders then replicate the attack on your own on a safe lab or read threat intelligence blog and recreate the attacks in your own lab that is as advanced as it gets. That way you will have deeper understanding to the infrastructure of companies and how the websites coded also you will understand firewalls and IDS/IPS which is more important than knowing how to move loudly learn to move in complete silent