I’ve recently started diving into web application pentesting and it’s been a blast so far. I began with sql injection , and I’m currently learning through PortSwigger Academy and TryHackMe labs.

I feel like I’ve got a basic understanding of how SQLi works (both error-based and some blind techniques), and I’ve practiced it a bit in labs. But I don’t want to jump around randomly I’d like to follow a solid progression to really build strong foundations so what do you think I must do now ? Practice more on SQLi or move to another vulnerability ?