Before you can hack, you must build your lab. A mistake many beginners make is hacking from their primary operating system. This is a rookie error; you need isolation and specialized tools.
"How to Get Started with Bug Bounty" - Resource Lists & Advice bug bounty tutorial exclusive
Don't send ' OR 1=1 -- . That triggers the WAF in 0.001 seconds. Instead, use with unusual syntax: Before you can hack, you must build your lab