libformatstr.py vs VinCSS Penetration Testing (2026)