How can i get started with application bug/vulnerability hunting? What are necessary things that needs to be done?