Now if you want to go more into the research field, yes you do have to go down this path and fall in love with IDApro, assembly, and C. .
The biggest weakness still today is social eng, but number two is still input validation.