it used to be easy, and its not really hacking

login, click forgot password, answer the two security questions (extract answer from your victim with your skills) and boom the facebook's yours

I did it on a few accounts loong ago