One of the greatest and for some people the worst part of Pentesting is the research that maybe involved. To wit all of your questions have been answered both here on this forum and the web in general.
Take a look around and you will find those answers.
Hints = hackme & de-ice. Those will get you started.