On-Demand: How to leverage cracked credentials for better exposure management