Breaking pfSense: XML, Command Injection & Cloud Backup Hijacking