I do not believe there is a set way to go about hacking either types of accounts. A bot that spams passwords is the only kind I have seen that had a rate of success of sortd
As Trisc0 said social engineering is a good way to hack many sites if there is no two way authentication and the person is use easy to find security question.
The Washigton Post had a good artical about it.