A few options:

- testing in preparation for a future attack

- proof of capability ("Nice network you have there. It'd be a shame if something happened to it")

- misfire ('What happens when I push this button that says "don't push"?')