A “Cookbook” for Vulnerability Research