Really not that much. Once you find a good exploit, the payload code is copy and paste for a lot of it. The payload issue is a solved problem with lots of available source code and knowledge out there for free.