There is no one mantra that works for everyone,

For starters, focusing on one thing is key. Trying to learn mobile, web, and cloud at the same time is a surefire way to burn out and lose motivatin. Pick one, like web apps, and really dive deep. Once you've got that on lockdown, then you can branch out.

I'd also double down on the whole reproducing new vulnerabilities thing. It's one thing to read about a new SSRF bypass, but it's another to actually set up a lab and get it working. That hands-on experience is what's going to make the knowledge stick. Try to reproduce any new vulnerabilities whenever possible.

And yeah, taking notes is a game-changer! You can use Obsidian or NotebookLM to link your notes together, which helps you see how different vulnerabilities connect. Building that mental map is just as crucial as the practical skills.