Spanking the Monkey (or how pentesters can do it better!)