Autonomous Penetration Testing Tool vs timing_attack (2026)