Autonomous pentesting against Active Directory, without the black box

Short summary

Darkmoon is an autonomous pentesting agent that enumerates and executes Active Directory attack paths with full transparency. Unlike black-box AI tools, it follows explicit markdown playbooks, maintains execution state via proxy, and logs every tool invocation for auditing. Built by pentesters and released under GPLv3 with documentation and a GOAD test environment.

• •Autonomous AD attack path enumeration using stateful agent loops
• •Transparent methodology: markdown playbooks, explicit tool calls, complete audit trail
• •Open-source (GPLv3), built by pentesters, runnable on GOAD test environment

Generated with AI, which can make mistakes.