There is no formal way to acquire this knowledge? I know lots of stuff, but don't know if it's enough or if it's what is needed. There are certs like OSCP, but I feel that these companies only care about it when it's about pentest