@LeonVQZ @JohnHammond I second that! It’s important, especially for those new to the industry, to know that everyone goes down rabbit holes from time to time.
As I was learning how to go through JavaScript to ID DOM-XSS, I once spent an entire 1.5 workdays (12hrs) trying to find a way to confirm I had a vulnerablility in a specific script. It would execute and stepping through the code would keep coming back undefined.
It was a heck of a rabbit hole, but once I stepped back out of the rabbit hole, I found three other vulnerabilities that led to a RCE.
I like hearing about the John Hammond that travelled down the wrong path but came back and found it. Do you think there is a process to detect rabbit holes?