Infrastructure benchmark

CI/CD and infrastructure pentest benchmark

CI/CD and infrastructure pentest benchmark across Jenkins, Redis, PostgreSQL, Terraform and Vault, real results only: Jenkins script console RCE, Redis unauthenticated exploitation, PostgreSQL COPY PROGRAM RCE, Terraform tfstate secrets exposed and a Docker socket container escape, each proven with a working exploit.

Darkmoon, the open source autonomous AI penetration testing tool, found 135 infrastructure vulnerabilities across 6 CI/CD and data-layer labs and proved 47 of them with a real exploit, from anonymous access to root on the host.

Results

Infrastructure runs, finding by finding

Lab / targetFindingsSeverityExploitedModelEvidence
Vault + registry + Docker socketcamp_20260801_2bd90d3f4115C15H9M2L8claude-opus-4-6Write-up Report
Terraform + AWS + Ansiblecamp_20260801_b1b969393421C5H8M16claude-opus-4-6Write-up Report
GitLab CE 19.2.1camp_20260801_a719641d264C8H10M2L2I2claude-opus-4-6Write-up Report
PostgreSQL 16 + MySQL 5.6camp_20260801_c0151524226C10H6M13claude-opus-4-6Write-up Report
Redis 7.4.10 (unauth)camp_20260801_96be38b993C5H1M5claude-opus-4-6Write-up Report
Jenkins 2.541.3 (security off)camp_20260801_b6ad197d33C3claude-opus-4-6Write-up Report
Attack chains

What each run proved

Vault + registry + Docker socketGuessed root token, image-layer secrets, and a Docker-socket container escape reading the host /etc/shadow.
Terraform + AWS + AnsibleAn exposed terraform.tfstate and Ansible inventory chained to an AdministratorAccess CI key.
GitLab CE 19.2.1An admin PAT with api and sudo scopes, an unmasked AWS secret in CI/CD variables, and open signup.
PostgreSQL 16 + MySQL 5.6PostgreSQL COPY TO PROGRAM RCE, pg_shadow and mysql.user hashes, and live session tokens.
Redis 7.4.10 (unauth)Unauthenticated access and the admin session token extracted; the RDB-write RCE honestly demoted (Redis 7.x).
Jenkins 2.541.3 (security off)Anonymous HTTP to script-console RCE to the master encryption key. All three findings exploited.

Keep exploring the benchmarks

FAQ

Infrastructure benchmark questions

What does the CI/CD and infrastructure pentest benchmark cover?

Six autonomous runs against Jenkins, Redis, PostgreSQL and MySQL, Terraform with AWS and Ansible, HashiCorp Vault with a container registry and the Docker socket, and GitLab. Highlights include Jenkins script console RCE, Redis unauthenticated exploitation, PostgreSQL COPY PROGRAM RCE, Terraform tfstate secrets exposed and a Docker socket container escape.

How many infrastructure vulnerabilities did Darkmoon find?

Darkmoon, the open source autonomous AI penetration testing tool, found 135 infrastructure and CI/CD vulnerabilities across 6 labs and proved 47 of them with a real exploit. The Redis run also honestly demoted the classic RDB-write RCE, because Redis 7.x mitigates it.

Was the infrastructure benchmark run on a local model?

This lab wave ran on claude-opus-4-6 through the open source Darkmoon CLI, which can also run on a local model (Ollama or llama.cpp). The Privacy Gateway tokenizes real values so the model works on placeholders. The web dashboard and the remediation-to-PR loop are paid Pro capabilities.

Darkmoon's own benchmark on public infrastructure labs. The offensive runs are produced by the open source Darkmoon CLI; the web dashboard and the remediation-to-PR loop are paid Pro. Raw reports live in the darkmoon-research corpus and the results feed the Darkmoon-Benchmarks leaderboard.

Run these checks in your own pipeline

Open source, self hosted and local first. Wire Darkmoon into CI/CD and gate the build on exploited findings. A star helps other teams find it.

Star Darkmoon on GitHubCompare AI pentest tools