EvilZone

This has been answered many times and the thing is, hacking is such a big topic, you can start off anywhere. As you've stated HTML and JS in your post, I'll take it that you want to look into web hacking, right?

Well if that's the case then you should look at learning HTML and JS and then from there move on to PHP and then from there go into hacking. After getting comfortable with PHP I suggest you look at SQLi; we have a great tutorial here on the forums: http://evilzone.org/tutorials/sql-injection/