Research web server vulnerabilities by choosing a site and determining what kind of platform it is running on.
Do not scan the server, you can use a site such as Netcraft to determine what the website is running.
See if you can find a vulnerability for that specific version of web server software. Post your results.