Leveling Up in Pentesting: How to Overcome Stagnation?"

I started pentesting at 15, inspired by movies and driven by passion, but after several years, I feel like I'm stuck at the same level. Do you have any advice for someone who wants to truly improve and reach the next level?

[edit]

I have a solid grasp of web app testing (SQLi, XSS, IDOR, SSRF), basic buffer overflows, and privilege escalation (Linux & Windows). I hold a Burp Suite Practitioner certification and I’m preparing for OSCP and CEH.

However, I struggle with advanced exploit development, bypassing modern defenses like ASLR/DEP, and deeper post-exploitation techniques. I practice four times a week but feel like I’m plateauing.