who to find vulnerabilities,
write shellcode,
Exploit the vulnerability and finally turn it into a Metasploit Exploit module! David Hoelzer is a Senior Fellow with the SANS Institute and author of the SANS Secure Coding in C/C++ course. [/code]

-->Video's:<--
Exploits - Part 1 - Exploit Creation in metasploit (intro)