Figuring out your weakness and exploiting it. Sql injection to get information/gain access, cross site scripting attacks, some service that you forgot to lock

Figuring out your weakness and exploiting it. Sql injection to get information/gain access, cross site scripting attacks, some service that you forgot to lock down, etc... The bad guys can be extremely smart and motivated.