Server vulnerabilities and tools used to find them.

Answer 1

Metasploit Framework
Golismero
Burpsuite
Sqlmap
Use google dorks
And exploitdb

Answer 2

Find server details and search in expliot-db or something like that