Comment by poopingatwork

They're just relevant to each other.

You should want to know avenues of exploit so you can be defensive with security. You have little control over the offensive side of vulnerability exploitation.