I'm sure many of our readers are well aware of the Metasploit Project and the Metasploit Framework, recently the founders of the Metasploit Project started a blog (http://metasploit.blogspot.com/). This blog is filled with useful information and interesting insight from the members of the Metasploit Project. What really makes this interesting is the most recent (at the time of writing this post) blog entry on their site, Exploit Development: GroupWise Messenger Server by H.D. Moore.

H.D. takes you through the development of a new module for the Metasploit Framework. Starting with the initial advisory posting, he takes you through finding the software, and walking through the vuln step by step. He takes you through all the steps using Windbg and some of the scripts and tools included with the Metasploit Framework.

The reading flows and it's fairly easy to follow, some knowledge of assembly would definitely be helpful but even without you should be able to work your way through what is happening. It's definitely worth checking out.