website hacking

1.) reconnaissance.
2.) Scan for open ports.
3.) See if there is any Vulnerability.
4.) Get the exploits for the vulnerability.
5.) If you don't get a Vulnerability, ask underground market for 0days
6.) run the expl0it and r00t the server.
7.) clear the log files and add your backd00r
8.) add more wheels (account priviledges) to it.