[foxhound]

The question is to big! is like if i ask you how to cooking or play music! so you really need to know the bare basics.....you really need to understand what are you trying to do, so you need to find vulns.....ok you can start by running a scan and see whats results you get...OS version of the machine, software and service running...then whenever you may find the vulnerability, you run the exploit with metasploit and thats all.....sounds easy but i my self still fighting with a site i want to deface...but not vulns find so far...so you also have brute force, which allows you to try millions of passwords in the admin panel login of your target....good luck and happy hunting!