Security · 1h ago
Darkmoon open-sources autonomous AD pentesting agent
Darkmoon is an open-source autonomous pentesting tool that targets Active Directory attack paths. It uses a Markdown playbook to guide an agent loop, enumerating and executing multi-step attacks while keeping state. The tool outputs an auditable log of every step, making it suitable for red teams and security reviewers.
Meridian48 take
The tool's transparency—playbook as code and full audit trail—could set a new standard for AI-assisted security testing, but its real-world reliability against complex AD environments remains to be proven.
Read the full reporting
Autonomous pentesting against Active Directory, without the black box →
DEV Community
active-directorypentesting-tool