ScruteX Agentic Pen Testing vs xss2png (2026)