That’s when she found it: a Udemy flash sale. The thumbnail showed a guy in a hoodie typing on a green-screen terminal. It was $12.99.

The course got dark—in a good way. Web app hacking: SQL injection, XSS, CSRF. She built a dummy e-commerce site and stole its "customer database" (just a text file of fake names). Then, buffer overflows. She had to write a Python script to crash a deliberately vulnerable program. It took 47 tries. When the shell popped open on her screen, she screamed into a pillow.

She never deleted the virtual machine. Sometimes, late at night, she'd fire up Kali and crack a hash just for fun. The hoodie-wearing guy on the course thumbnail? She never met him. But he gave her the one thing she needed: a door into a world that had always seemed locked.

Her boss caught her running a phishing simulation on the company's test environment. "You're fired," he started, then paused. "Wait… show me how you did that."