Internal hacks are just like external hacks, just that you read memory by dereferencing the pointers directly.
If you want to get advanced, call the engine functions. To do that, you'd have to understand how the engine is built ( how do multiple modules communicate to eachother ), how you can utilize the engine, how classes are layed out in memory etc..