Zipper

I’m at the initial foothold, Have i to search some real exploit with searchsploit to get creds or just watching around?