Dark-Moon: Open-source autonomous AI penetration testing

by ASCIT31 · MCP Server · ★ 1.2k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install Dark-Moon

git clone https://github.com/ASCIT31/Dark-Moon.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 71/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

active-directoryai-penetration-testingai-red-teamai-red-teamingai-securityai-security-toolautonomous-aicloud-securitykubernetesllm

Quick Facts

Stars1,151
Forks199
LanguagePython
CategoryMCP Server
LicenseGPL-3.0
Quality Score71/100
Open Issues3
Last Updated2026-10-27
Created2024-11-26
Platformsbrowser, k8s, mcp, python
Est. Tokens~16k

About Dark-Moon

The Open-Source AI-Powered Autonomous Penetration Testing Platform Full Documentation · Contributing · License What is DarkMoon? DarkMoon is an automated penetration testing tool that orchestrates complete security assessments using artificial intelligence security agents.

Compatible Skills

These tools work well together with Dark-Moon for enhanced workflows:

  • red-run — semantic(0.50)+complementary+rare_topics+same_lang+similar_pop+shared_platform (72%)
  • fuzzforge_ai — semantic(0.35)+complementary+rare_topics+same_lang+similar_pop+shared_platform (71%)
  • Claude-BugHunter — semantic(0.42)+complementary+rare_topics+same_lang+similar_pop+shared_platform (69%)
  • offensive-claude — semantic(0.40)+complementary+rare_topics+same_lang+similar_pop+shared_platform (69%)
  • Z3r0 — semantic(0.40)+complementary+rare_topics+same_lang+similar_pop+shared_platform (68%)

Dark-Moon alternative? Top 6 similar tools

Looking for a Dark-Moon alternative? If you're comparing Dark-Moon with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • pentest-ai by 0xSteph · ⭐ 1.8k

    Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a

  • CyberStrike by CyberStrikeus · ⭐ 1.9k

    Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models,

  • pentest-ai-agents by 0xSteph · ⭐ 2.3k

    Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized pene

  • agentic-radar by splx-ai · ⭐ 1.1k

    A security scanner for your LLM agentic workflows

  • AutoRedTeam-Orchestrator by Coff0xc · ⭐ 263

    MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static AI/MCP attack-surface

  • medusa by Pantheon-Security · ⭐ 1.0k

    AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools