Lobsters: Pulling the right strings for RCE on a Puppet