Autonomous Penetration Testing Tool vs jwt_tool (2026)