Strike Manual Pentesting Project vs timing_attack (2026)