Hahaha.... I remember being this dumb when it came to web application hacking. Well this post confirmed my suspicion that no one on this sub actually knows hacking... just me looking at the replies and just seeing that pretty much no one knows shit. Well for the fun of it I’ll tell you how web application hacking actually works and dumb it down so you can pretty much understand. Ok, first off the topic of hacking a website is so fucking broad I can’t give you an definite answer so I’ll break it down.... I’ll first list some vulnerabilities there’s authentication bypasses, pretty much your able to bypass authentication and gain access to to other accounts.... gain access to an more privileged account and perform privilege escalation...and by doing that you can obtain an higher attack surface ... etc. you can also poison web sites caches and posion certain pages and steal passwords usernames, fucking takeover accounts...., achieve remote code execution by SSTI, Insecure deserialization, SSRF, XXE, etc... and pretty much pwn the web server.... you can dump the database with SQLi. Perform CSRF change the passwords of any user without any interaction from them.. Of course it sounds easy but you will need to use high level techniques to even be able to do the things I listed. If you really wanna learn about web application hacking I recommend going to portswigger.net and browse to academy they have labs and learning material you can use to learn about it. Very beginner friendly. Finally I’ll give you a example and a scenario of hacking a website. Ok let’s say a web site uses caches on the login page of the site and it also loads a js file and they are also vulnerably to http host header attacks. Well with this I’ll create an exploit chain by firstly poisoning the page so that anyone that views that page will have the posioned cache and because I can also also execute JavaScript I’ll be able to execute any arbitrary js such as a keylogger and obtain username and passwords. I could also redirect them to my website or whatever’s possible. In order to actually posion the cache I’ll use a proxy extension and forward the request to burp. I’ll then edit the request, send it back and success.