SQL injections, vulnerability exploits, or other hijacking mechanisms to inject links directly. In my mind, using a system as designed without breaking any laws lands in grey-hat territory.