PHP/MYSQL is the best way to start hacking websites. I am too lazy atm to search for a tutorial, but start with Sql injections. Most common methods.
Don't aim for the easy website attacks, like a dot-net-nuke. Its gay, and works for a very limited amount of websites.