Skip to content

Darkmoon v1.3.0 — 50-agent roster, GPU cracking, reliability & privacy hardening

Choose a tag to compare

View all tags
@MBK-fr MBK-fr released this 23 Aug 15:35
· 18 commits to master since this release
v1.3.0
40341bb

Darkmoon v1.3.0 consolidates the full specialist roster with a wave of reliability and privacy hardening on top of the Privacy Gateway (v1.2.0) and the initial agents expansion.

Highlights

  • Complete 50-agent roster. The pentest orchestrator now dispatches 50 specialists (up from 34) across web, cloud (AWS / Azure / GCP / Entra ID), IaC (Terraform / Ansible), CI/CD (Jenkins / GitLab / GitHub), containers & registries (Docker / Kubernetes / container-registry), data stores, messaging & cache, Active Directory, and firmware / IoT.
  • GPU-accelerated cracking. hashcat is routed to the GPU when one is detected at runtime, with automatic CPU fallback.
  • Campaigns no longer freeze. A hung tool command can no longer stall an entire campaign (execution guard with a per-command timeout).
  • Deterministic sub-agent dispatch. The orchestrator resolves every sub-agent through the registry prompt_file and never guesses a filename, removing a source of intermittent "agent not found".
  • Privacy Gateway hardening (#40). URLs, domains and internal paths are now tokenized by default, from a single source of truth shared by the server and the vault; an unset or malformed DARKMOON_PRIVACY_CATEGORIES can no longer silently narrow the boundary.

New

  • feat(agents): roster expanded to 50 specialists — cloud, IaC, identity, CI/CD, data, firmware/IoT (52cdcb4)
  • feat(gpu): runtime GPU detection routes hashcat to the GPU, CPU fallback (28faaba)

Fixed

  • fix(executor): a hung command can no longer freeze a campaign (e9b80b7)
  • fix(orchestrator): resolve sub-agent files via the registry, never guess <id>.md (5bdd43f)
  • fix(privacy): protect URL / DOMAIN / PATH by default; single source of truth for categories — #40 (40341bb)
  • fix(health): advertise the whole toolbox instead of a hard-coded list of 13 (f6abe7a)
  • fix(reports): honour DARKMOON_REPORTS_DIR so Pro reports survive a restart (a59517f)
  • fix(report): rebuild the dispatch log from findings, finish the CVSS hardening (3b03022)
  • fix(agents): fix three broken tool references before they cost a campaign (12e5e00)
  • fix(agents): add the missing DASHBOARD REAL-TIME PUSH block to ad and kubernetes (62f1b85)
  • fix(toolbox): align the allow-list with what the image actually installs (928f76d)
  • revert(toolbox): remove nmap (forbidden) (4e4a781)

Docs & chores

  • docs: execution guard, GPU acceleration and report path; cloud/data/firmware CLI inventory; README agent roster and toolbox table (7c5e54a, 36fff3d, 8439204, 063903e)
  • chore: ignore editor state and OS metadata; remove a stray .github directory (6ccbdba, c6a165b, aad1ba2)

Full changelog: agents-expansion-2026.08...v1.3.0

Assets 2
Loading