It’s my personal hacking learning strategy:

• Superficially recognize how it is done - you need to find familiar concepts
• Read OWASP Top-10 for it
• PRACTICE! Try find lab for this taks (Portswigger)
• Gather methodology on testing from various sources
• Get list of hack tools
• Based on methodology create own checklist on pentest
• Find checklists for this topic online and combine with own if needed
• PRACTICE! (TryHackMe, HackTheBox, Portswigger…)
• Fill the knowledge gaps
• Extra: Read books and articles to deepen knowledge base