Common, no! That's one way to do it if you are a friend of an admin and at their house I suppose, but, other than that, it would be hard to do. I suppose you could write a script and send a key log through to the person. It would show up as a keylogger or adware/spyware when they scan though. So, most of the time, that is ----. Like I mentioned several times... brute force hacking... that is how it is done plenty.
Is mySQL 5.0 subseptable to bruteforcers? i know there is now an md5 bruteforcer, tried it once and let it run for 2 days and it never finished ^_6
MD5 bruteforcing has been out there for a while. Normally using Rainbow Tables. Not saying that I would do something like that, but if I were to do it, I'd use PHP to write a cookie stealer. It wouldn't be that hard to do.
I pretty much know how to hack and know a few hackers. The reason most people hack is pretty much to see if they can hack a webpage and get by with it. Its kind of like a sport. There is peoples that have hacked the biggest of companies that are the most secure and have gotten away with flying colors. Most the time like I said its not to steal information but sometimes it is.
Hackers are people that have nothing better to do with their time than make somebody's life more complicated. People work hard on forums, to watch them get hacked. Feel sorry for all those forums that had something as unfortuante as this happen to them. It's ridiculous. As for why a person would do it? There are a million reasons why. We could spend a whole year listing reasons why somebody could hack a forum... and we still wouldn't be done. Snipe.