10 Best Website Hacking Methods That Hackers Used to Hack any Website
Website hacking may be legal or illegal? surprised! Don't worry. Let's me explain, If any hacker has the authority to hack your website then It is legal website hacking and If not then it is illegal.
Confused? Now you are thinking, Why anyone gives any hacker to that authority to hack their website?
Well there are many popular companies that gives authority to Hackers to hack their website using their skills and also pay for it.
Confused again?
OK, Let's go in little deep 
No Website is completely secure over the internet, Even not Facebook, LinkedIn, Twitter or Google etc too.
Now again confused?
As you know, Website is the huge combination of codes that can't be understand easily and perfectly. Sometime there may be any vulnerability left while coding that can harm website owner.
To find these vulnerability, Top Companies like Facebook, Yahoo!, Google, Reddit, Square, and Microsoft etc also run a programs for all hackers which is Bug Bounty Programs.
A bug bounty program is a deal offered by many websites and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to exploits and vulnerabilities. These programs allow the developers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse.
Most Popular Website Hacking Methods
There are many ways for website hacking but Here I am gonna discus about top 10 best website hacking methods that most hackers used to hack any website.
1. Injection Attacks
Injection Attacking occurs when there are flaws in your SQL Database, SQL libraries, or even the operating system itself. Employees open seemingly credible files with hidden commands, or "injections", unknowingly.
In doing so, they've allowed hackers to gain unauthorized access to private data such as social security numbers, credit card number or other financial data.
TECHNICAL INJECTION ATTACK EXAMPLE:
An Injection Attack could have this command line:
String query = "SELECT * FROM accounts WHERE custID='" + request.getParameter("id") +"'";
The hacker modifies the 'id' parameter in their browser to send: ' or '1'='1. This changes the meaning of the query to return all the records from the accounts database to the hacker, instead of only the intended customers.
2. Cross-site Scripting (XSS) Attacks
Cross Site Scripting, also known as an XSS attack, occurs when an application, url "get request", or file packet is sent to the web browser window and bypassing the validation process. Once an XSS script is triggered, it's deceptive property makes users believe that the compromised page of a specific website is legitimate.
For example, if http://ift.tt/1mzlYCV has XSS script in it, the user might see a popup window asking for their credit card info and other sensitive info.
TECHNICAL CROSS SITE SCRIPTING EXAMPLE:
A more technical example:
(String) page += "";
The attacker modifies the 'CC' parameter in their browser to:
'>