Originally Posted by thebestbuddy
the article says it all... Try to keylog or phish the user. Or sometimes guessing can be handy if the user is a bit noob. For example, some people put passes like their phone numbers, girlfriend's name, their favourite color, idols, etc. which can be guessed pretty easily.
Originally Posted by udefined
nah its better to use SQLinjector
the most easy hack tool
Using tools is always noobish act. A kid of 8 who can copy and paste the URL will also be able to hack and deface the websites if he uses such tools. So I suppose, its better to learn how things are working rather than using the tools and thinking that I am leet haxx0r.