o365-attack-toolkit vs Trail of Bits Software Assurance (2026)