[xdlwilliamz]

Moved from The Lounge forum, accordingly to Website & Server Hacking.

It's not possible to generalize attack vectors, without assessing and researching the security and vulnerabilities (If any) of the website(s) In question.

ok i get it, so it all depends on the vulnerabilities detected for each site ...

Correct.

There must be a flaw, some sort of weakness/vulnerability to allow exploitation and access the back-end thereafter. It's just a matter of Identifying their security loopholes. I've spent as long as two weeks on one site, and finally gained access.

wow that's cool, i see the dedication
So aside from scanners like nmap and the rest, what other means can one detect vulnerabilities in a site ?
and what level of access could one get with SQL injection ?