ASCIT31/Dark-Moon

Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.

890Stars on the repository
50Mods indexed here, across every type
7d agoLast push, which is what freshness is scored on
GPL-3.0Licence, which decides whether bodies are shown

headless-browser

25

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for web application navigation with headless browser.

not rated 890 +12 7d ago A 24 tokens GPL-3.0

hypervisor

26

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a virtualization control plane (VMware vSphere/vCenter/ESXi, Proxmox VE, Microsoft Hyper-V, Nutanix Prism, Citrix Virtual Apps and Desktops).

not rated 890 +12 7d ago B 53 tokens GPL-3.0

jenkins

27

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for Jenkins controllers & agents: script console, credentials store, jobs/pipelines, plugins, nodes, API tokens, unauthenticated access.

not rated 890 +12 7d ago A 0 tokens GPL-3.0

joomla

28

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Joomla applications (core, components, modules, plugins, templates, Joomla API, comcontent, comusers, commedia, Smart Search, WebAuthn, MFA, Web Services).

not rated 890 +12 7d ago B 54 tokens GPL-3.0

kubernetes

29

ASCIT31/Dark-Moon

Agent Claude Code

ID: kubernetes NAME: kubernetes DESCRIPTION: Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for Kubernetes cluster.

not rated 890 +12 7d ago C 0 tokens GPL-3.0

magento

30

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Magento/Adobe Commerce applications (core, modules, themes, REST/SOAP/GraphQL APIs, Admin Panel, catalog/cart/checkout/payment, Knockout.js, UI Components, Layout XML, Dependency Injection, plugins/observers).

not rated 890 +12 7d ago B 64 tokens GPL-3.0

mdm

31

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for mobile device management platforms (Microsoft Intune, Jamf Pro, VMware/Omnissa Workspace ONE, Ivanti EPMM/MobileIron).

not rated 890 +12 7d ago A 46 tokens GPL-3.0

messaging-cache

32

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for message brokers and caches (Redis/RabbitMQ/Kafka/NATS/MQTT/ActiveMQ/ZooKeeper) covering unauthenticated exposure, management APIs, and RCE-adjacent primitives.

not rated 890 +12 7d ago A 56 tokens GPL-3.0

mobile

33

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for mobile application packages (Android APK and iOS IPA static analysis, plus direct testing of the backend endpoints the app reveals).

not rated 890 +12 7d ago A 39 tokens GPL-3.0

moodle

34

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Moodle LMS applications (core, plugins, Web Services API, quiz/grade/enrollment logic, scheduled tasks, roles/capabilities).

not rated 890 +12 7d ago A 43 tokens GPL-3.0

nest

35

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for nest/next application.

not rated 890 +12 7d ago B 19 tokens GPL-3.0

nodejs

36

ASCIT31/Dark-Moon

Agent Claude Code

Autonomous pentest sub-agent using Darkmoon MCP for Node.js (Express / Angular / SPA) applications.

not rated 890 +12 7d ago A 24 tokens GPL-3.0

nosql-databases

37

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for NoSQL data stores (MongoDB/Elasticsearch/Neo4j/CouchDB: unauthenticated access, role and index enumeration, server-side scripting, snapshot and file primitives, document extraction).

not rated 890 +12 7d ago A 0 tokens GPL-3.0

observability

38

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an observability and monitoring stack (Grafana/Prometheus/Alertmanager/Splunk/Kibana-Elastic-Logstash-Fleet/Zabbix/Wazuh).

not rated 890 +12 7d ago A 51 tokens GPL-3.0

pentest

39

ASCIT31/Dark-Moon

Agent Claude Code

Strategic pentest Assessment Orchestrator aligned with ISO 27001, NIST and industrial audit standards.

not rated 890 +12 7d ago C 24 tokens GPL-3.0

php

40

ASCIT31/Dark-Moon

Agent Claude Code

NON-BLOCKING EXECUTION (MANDATORY).

not rated 890 +12 7d ago A 1 tokens GPL-3.0

pki-adcs

41

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a certificate authority plane (AD CS templates ESC1-ESC16, CA object and registry abuse, NTLM relay to enrollment, generic PKI/ACME/EST/SCEP/client-certificate mapping).

not rated 890 +12 7d ago A 59 tokens GPL-3.0

prestashop

42

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for PrestaShop applications (core, modules, themes, Web Services API, Back Office, cart/checkout/payment, Smarty templates, ObjectModel, overrides).

not rated 890 +12 7d ago B 47 tokens GPL-3.0

ruby-on-rails

43

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for ruby on rails application.

not rated 890 +12 7d ago B 22 tokens GPL-3.0

springboot

44

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for java spring boot application.

not rated 890 +12 7d ago B 20 tokens GPL-3.0

sql-databases

45

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for relational databases (PostgreSQL/MySQL-MariaDB/MSSQL/Oracle) covering roles-grants, network exposure, file-read-write and command-execution primitives, and data extraction.

not rated 890 +12 7d ago A 55 tokens GPL-3.0

sso-idp

46

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an SSO identity provider (Keycloak/Okta/Auth0/Authentik/PingFederate/PingOne and generic OAuth2-OIDC-SAML-SCIM-JWT flows).

not rated 890 +12 7d ago A 56 tokens GPL-3.0

storage

47

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for network and object storage (SMB/Samba, NFS, MinIO, Ceph RGW, OpenStack Swift) including the secret hunt inside the files it opens.

not rated 890 +12 7d ago B 49 tokens GPL-3.0

terraform

48

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for a Terraform/Terragrunt Infrastructure-as-Code estate (HCL source, remote state backends, plans, provider credentials).

not rated 890 +12 7d ago B 40 tokens GPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: