You must read a lot of tutorial to understand a principle, and use exploit, learn to work with exploits, and read a www.xatrix.org for example for security news...
And good luck !!!