can only attack ressources when vulnerable now