1. sql injection
2. hacking other accounts with brute force etc.
3. finding a method to crash the server, making it possible to dupe
4. find broken ingame scripts which will enable you to dupe, or abuse other game mechanics
5. packet editing
most of the above stuff applies to badly coded games or private servers.