Autonomous Penetration Testing Tool vs xss2png (2026)