JAG Cybersecurity Pentesting / Ethical Hacking vs o365-attack-toolkit (2026)