[injury]

Hey!
I’m very new to this kind of stuff, but it sounds interesting, and the past couple of days, I’ve experimented with different sort of attacks like SQLi, Command Injections, XSS etc. 

However, one thing I don’t get is how people breach websites. Am I doing something wrong? Am I unlucky? What’s the issue? I sometimes doubt my abilities, since it frustrates me, how great security these websites has. What do y’all do in order to succeed with a successful breach? I’d love to get some tips & tricks, and of course always learn more & make friends along the way!

[zSenior]

give yourself enough time to gather info first [Website/Network/Admins/Employees] and understand the website technologies,
then after all first steps when you scan the vulnerabilities do not copy & paste what you learn you need to know how everything running in the background to make your own tricks or tips.

How Websites Breached?
if there is No Vulnerabilities "and this is Low Probability", you can try brute force attacks [FTP, SSH, Website Admin Creds,...etc] Remember to scan ports.
if no success! try Phishing Attacks with some social engineering

Learning alone not enough, Reading important and will give you much ideas .. Read As you can and keep going.
Good Luck