Advanced exposure and vulnerability management from an attacker's perspective