The Exploit Doesn't Exist. You Can Still Prove It Works Against You