Autonomous Penetration Testing Tool vs jwt-cracker (2026)