DarkMoon

Open-source autonomous penetration testing platform that coordinates specialized AI agents to run end-to-end assessments across web, network, Active Directory and Kubernetes targets, executing 50+ integrated tools (Nuclei, NetExec, BloodHound, sqlmap, ffuf) through a controlled MCP execution layer. A local privacy gateway replaces real IPs, hostnames and credentials with deterministic placeholders so sensitive values never reach the LLM provider. Runs via Docker with an API key from Anthropic, OpenAI, OpenRouter or local models.