[dufpwbfi]

How do people find targets to attack? Do they use smth like google dorks or they search for valuable websites?

[pompeya]

hi friend, you can build you own website and after can check how you did. Check the access to the db or FTP. Also do social enginneering with your own to analyze your password security. Try to look into your security holes and apply this method to check the security of other sites. Most times the sites have a very easy errors of their security. If you can not build your website can sart as menthioned up this post, with 'try hack me' and
'hack the box' by the_one_to_who_phishes