Found this article on 'Linux Voice' and thought of you. lol
Link: http://www.linuxvoice.com/issues/005/hack.pdf
Quotes: "Learn how to Hack
The best way to defend yourself on the web is to know how the enemy works. Learn to hack the web, and keep your server safe from the dodgy side of the internet."
"Legalities
Breaking into websites without permission is illegal, and in many countries the potential penalties should you get caught defy reason. There’s also no excuse, as there are loads of legal ways to get your hacking fix. There are all the web apps on the OWASPBWA distro, plus there’s our hacking challenge (see boxout, right). Once you’re done with that, why not install some open source webapps on to a virtual machine and try to find weaknesses? The maintainers will undoubtedly be glad to hear of anything you find provided you report it in the proper way (see the projects’ individual websites for details of how to submit vulnerabilities).A few companies also offer responsible people the chance to try to find vulnerabilities on their websites, and some even offer bounties should you find any. For example, take a look at Facebook’s program here: www.facebook.com/whitehat.If that’s not enough to encourage you to stay on the right side of the law, there’s a list of convicted computer criminals on Wikipedia (http://en.wikipedia.org/wiki/List_of_computer_criminals) complete with their sentences"