According to @galnagli, Claude Opus 5 immediately probed /phpmyadmin and found 2 critical vulns, outperforming Opus 4.6 on repeated pentest runs.