ASCIT31/Dark-Moon

Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.

878Stars on the repository
50Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
GPL-3.0Licence, which decides whether bodies are shown

ansible

02

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an Ansible / AWX / Automation Controller configuration-management plane (inventories, playbooks, Vault, become, AWX REST API).

878 3d ago B 44 tokens GPL-3.0

aws

04

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an Amazon Web Services account (IAM/STS/S3/EC2/Lambda/ECS/EKS/API-Gateway/Cognito/Secrets/RDS/CloudFormation/metadata).

878 3d ago D 50 tokens GPL-3.0

azure

05

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a Microsoft Azure resource plane (subscriptions/RBAC/managed-identities/VMs/Storage/KeyVault/AppService/Functions/AKS/SQL/Automation/ARM).

878 3d ago C 50 tokens GPL-3.0

backup

06

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an enterprise backup platform (Veeam/Commvault/Rubrik/Cohesity/Veritas/Nakivo/Bacula/Restic/Borg: credential stores, repositories, restore-as-exfiltration).

878 3d ago A 0 tokens GPL-3.0

business-platforms

07

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for enterprise business platforms (Salesforce, ServiceNow, Atlassian Jira/Confluence, SharePoint on-prem, Nextcloud).

878 3d ago A 43 tokens GPL-3.0

container-platform

08

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a container platform layered on Kubernetes (OpenShift routes/SCC/BuildConfig/OAuth/internal registry, Rancher management plane/API keys/Fleet/downstream clusters).

878 3d ago B 48 tokens GPL-3.0

container-registry

09

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for OCI/Docker container registries (Harbor, Docker Registry v2, GHCR, GitLab Registry, Quay, JFrog Artifactory, Nexus, ECR/ACR/GAR).

878 3d ago A 59 tokens GPL-3.0

docker

10

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an exposed Docker Engine API (unix socket or unauthenticated TCP 2375/2376), images, containers and container-to-host escape.

878 3d ago B 43 tokens GPL-3.0

drupal

11

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Drupal applications (core, contrib modules, JSON:API, REST, Entity/Field system, Render API, Twig, Views, Drupal Commerce, roles/permissions).

878 3d ago A 49 tokens GPL-3.0

edge-proxy

12

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an edge and reverse-proxy tier (Cloudflare/Nginx/HAProxy/Traefik/Envoy/F5-BIG-IP/Citrix-ADC: origin discovery, admin planes, request smuggling, cache poisoning, WAF bypass).

878 3d ago A 0 tokens GPL-3.0

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for mail infrastructure (Exchange on-prem Autodiscover/EWS/OWA/ECP, Postfix/Exim/Dovecot, SMTP relays, SPF-DKIM-DMARC spoofing, mailbox data mining).

878 3d ago A 61 tokens GPL-3.0

entra-id

14

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for Microsoft Entra ID (Azure AD) identity: users/groups/roles, applications & service principals, OAuth consent, app credentials, Conditional Access, Microsoft Graph, hybrid AD/Azure paths.

878 3d ago A 0 tokens GPL-3.0

firewall-network

15

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for firewalls and network infrastructure (Palo Alto/Fortinet/Check Point/pfSense/Cisco ASA plus IOS/Juniper/Aruba/MikroTik gear plus BIND/PowerDNS/Infoblox/DHCP/IPAM management planes).

878 3d ago A 69 tokens GPL-3.0

firmware

16

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for embedded / IoT firmware and devices (firmware image extraction, hardcoded credentials & secrets, backdoors, embedded web/CGI/LuCI interfaces, insecure network services, outdated components — OpenWrt/BusyBox/Dropbear/uhttpd class devices).

878 3d ago B 70 tokens GPL-3.0

python-flask

17

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for python-flask web application.

878 3d ago B 22 tokens GPL-3.0

gcp

18

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a Google Cloud Platform environment (IAM/service-accounts/impersonation/GCS/GCE/Functions/Run/GKE/SecretManager/BigQuery/CloudSQL/metadata).

878 3d ago B 52 tokens GPL-3.0

github

19

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for GitHub / GitHub Enterprise (orgs, repos, PATs, GitHub Apps, Actions workflows, secrets, self-hosted runners, packages, branch protection).

878 3d ago A 49 tokens GPL-3.0

gitlab

20

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for GitLab (SaaS/self-managed): groups/projects, permissions, CI/CD variables, pipelines, runners, artifacts, registry, deploy & access tokens, webhooks, K8s agent.

878 3d ago A 0 tokens GPL-3.0

gitops

21

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a GitOps control plane (ArgoCD/FluxCD/Tekton/Crossplane, their controllers, repo and cluster credentials, and the git-to-cluster pivot).

878 3d ago A 51 tokens GPL-3.0

golang

22

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for Go (Gin / Echo / Fiber / Beego / net-http) web applications.

878 3d ago A 32 tokens GPL-3.0

graphql

23

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for graphql application.

878 3d ago A 17 tokens GPL-3.0

hashicorp-vault

24

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a HashiCorp Vault instance (auth methods/policies/token abuse/secrets engines KV-PKI-transit-database/leases/namespaces/unseal).

878 3d ago A 49 tokens GPL-3.0