The main topics of the session are information gathering, operational security, enumeration, exploitation, and persistence. We will discuss different weaknesses hackers look for and try to exploit. All with a focus on how developers make these mistakes and how they can solve them. We will also take a look at the consequences of being hacked, and what to do when, not if, this happens. During the talk, we take a look at three examples of exploits: Log poisoning, Sensitive Information Leaks, and privilege escalation. At the end of the talk, I also introduce other learning resources which can be used to learn hacking yourself.