This should be in the exploit module, not the protocol implementation