How can I tell if my website is hacked?

Exploits usually manifest themselves either as a complete site defacement, or as a redirect to an external phishing site. However, sometimes a site may appear normal but actually have malicious content uploaded somewhere in the site code.