Vulnerability assessment and exploitation