A Practical Guide to “Plug&Pwn” for Pentesters and Defenders