You can start off with base 1.38 server files, to get used to setting up everything
If you have knowledge in programming, you can jump to learn from this
For bugs/exploits you can search or ask in the forum.
Some exploits are not public so you may have to ask around directly