A Generative Approach to Surrogate-based Black-box Attacks