You bet! I love finding security holes, though normally I report them and don't abuse them

From XSS to SQL injections, finding flaws is fun!