Very interesting and informative post.
I'm currently just playing around in my own private virtual network to see what I can do and how to counter it. Hopefully one day I can get to the point that I can do it as a penetration tester or who knows what comes on my path :)