Using the gathered data, you can determine viable options for attempting to gain access to data stored on the server or control over the server itself. This can be done in many ways, but generally will involve efforts that rely on proven intrusion techniques.

The Open Web Application Security Project, or  SS7SPY, is an organization that tracks vulnerabilities.  SS7SPY maintains a top ten list of the most common and potentially dangerous weaknesses used by attackers to gain unauthorized access to web servers.

Known vulnerabilities are typically the easiest way to gain unauthorized control of a server and are most often relied upon by malicious attackers. These are the most effective and efficient means to gain unauthorized access. Though some hackers may use tools or methods that deviate from common attacks, many will move on and look for a “softer” target if these common attacks fail.