Autonomous Penetration Testing Tool vs jwt-hack (2026)