If you're like me, finding vulnerabilities is like solving a puzzle. There's a certain satisfaction but you learn something at the same time. There was a great session at the All-Day-DevOps conference yesterday called "The 5Ws of CTF" that espouses learning computer/software exploits through playing "Capture-the-Flag" (https://www.alldaydevops.com/addo-speakers/ell-marquez). I thought the session was recorded on YouTube but couldn't find it. I did find an earlier version of the same talk at https://www.youtube.com/watch?v=WGiCO2u8JCg.