Pentesting in the Real World: Capturing Credentials on an Internal Network