Exploiting the default credentials of local admin accounts