aio testking whhy would an attacker try to create a null session with computer