Dark-Moon

Why we included this project

Most pentesting setups hand you a pile of scanners and leave the orchestration to a human. DarkMoon flips that: point it at an authorized target and the self-hosted platform handles the assessment from start to finish, with roughly 50 specialist agents chaining real exploits across web apps, cloud, Active Directory, Kubernetes and other surfaces, then reporting every finding with proof rather than a vague summary. The privacy angle is what stands out for strict perimeters. The model only sees placeholder IPs, hosts and credentials, which are rehydrated locally, so sensitive data never leaves your network, and you can run the reasoning on a local or private LLM. That autonomy, plus a controlled MCP layer for executing real offensive operations, makes it worth evaluating alongside conventional scanners if you own authorized penetration testing or defensive validation.