I can't recall having been hacked personally (I did some fooling around on a public network in my ex-dorm, was fun), but I recall that the local government's an

I can't recall having been hacked personally (I did some fooling around on a public network in my ex-dorm, was fun), but I recall that the local government's anti-cyber crime division's website was owned. It was a fail of epic proportions. Someone found an old Joomla! exploit (a simple SQLi attack on a forgotten password form) and changed the credentials to admin:admin. It was a big scandal in the news and the police, as scapegoats, arrested two 19-year-olds who just happened to log in with admin:admin and actually leave their names on the front page of the website. The fuckers weren't able to catch anyone besides them, let alone the original perpetrator. The guys were fined and I think they actually got a short jail sentence. I once ran a public web server on a No-IP domain, and my lighttpd logs were full of hundreds and hundreds of probes (I assume all automated) for some common exploits and security holes. I had some script kiddies attempt to sneak in SQL injection attacks (I was using MongoDB so they were out of luck) and even try some stupid shit like entering '>exec("echo 1"); into my forms (to this day I'm not sure what that was supposed to do) and whatnot.