how does someone hack a website?

i'm just curious!
do you like get their code and try to break it then run it?
or whats the objective?

find exploits sql injection then dump db sql lol.

I don't think that's what he means