Universalization of any adversarial attack using very few test examples