From 9473fcc020e716ef280b85a6bec951f8f4c6fead Mon Sep 17 00:00:00 2001 From: Mehdi Boutayeb Date: Mon, 7 Sep 2026 10:19:59 +0200 Subject: [PATCH] Add Darkmoon open source autonomous penetration testing platform --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 2da60c8..78eb8d5 100644 --- a/README.md +++ b/README.md @@ -197,6 +197,7 @@ Business logic testing focuses on identifying security flaws in an API’s core 12. **[API Hammer](https://github.com/Azure/api-hammer)** – Simulates different API request scenarios to test workflow security. 13. **[BOLA Detector](https://github.com/BOLA-Detector)** – Identifies Broken Object Level Authorization (BOLA) issues. 14. **[GadgetProbe](https://github.com/BishopFox/GadgetProbe)** – Tests serialization vulnerabilities affecting API logic. +15. **[Darkmoon](https://github.com/ASCIT31/Dark-Moon)** Autonomous API penetration testing platform that chains reconnaissance, authentication, injection and business logic testing with 50 agents over MCP and reproducible proof of exploitation. 15. **Custom Python Scripts** – Tailor-made automation for detecting API logic flaws. ---