You're asking the same questions over and over.... I already gave you a good enough (in my opinion) answer
here on how to begin hacking websites, but perhaps it covered concepts a tad bit too advanced for you at the moment, I can understand that. And I can't edit it anymore to make it clearer, unfortunately.
Anyhow, right now it's kinda like you wanted to be a pilot, but instead of attending flight school, you were asking how to start the plane engine. There is a time for everything.
Are you targeting website or a desktop applications? Because both are vastly different in term of exploitation and require different skills.
Then you familiarize yourself with the target technologies -- Ask yourself questions:
«
What is a website? How does it works? What server application the web server is running, Apache, Nginx or other? Is it running PHP or ASP or something else? But what is PHP exactly? It's a server-side scripting language. Then perhaps I should learn it or at least know how it works. Apparently websites are often hosted on machines running Linux that are accessible using the SSH protocol... Perhaps it's possible to login to it one way or another... Let's search on the Internet!»
This is a checklist of things you do when you perform an attack
https://gist.github.com/gbedoya/10935137
(Sep 9, 2021 12:45 PM)marenviss356 Wrote: * how much time do you need to spend on such an attack
As much as you can. Could be hours, days, weeks if your target is important. The step of recognition can be long.
(Sep 9, 2021 12:45 PM)marenviss356 Wrote: * how to keep privacy, what do you recommend, yeah i know vpn does not give you full anonymity
A good VPN that is not advertised on TV
[censored] cough cough, I recommend Mullvad even if it's in Sweden.
A web browser that disable javascript, tracking and cookies, and that you ONLY use for exploiting and nothing else.
And a very common user agent because it's harder to spot on the logs.
And something that you can't download : common sense. Don't be signed on your Google/Youtube (even on another browser) account while using your VPN or exploiting something.
(Sep 9, 2021 12:45 PM)marenviss356 Wrote: * what should I do next when I discover a website/application vulnerability
Contact the owner of website hehe
By the way here's a thread that might interest you ->
https://hackforums.net/showthread.php?tid=6171907
