Docs

DarkAI is an offensive-security agent. Give it a target you are authorized to test and it works like a pentester: recon, enumeration, validation, exploitation notes and a report.

Modes

• MAX — the default. An agent loop with a real Kali sandbox: nmap, curl, dig, whois, gobuster, ffuf, nikto, nuclei, sqlmap, python3 and anything else installed. It plans, runs commands, reads the output and iterates until the job is done.
• Fast — quick, single-pass answers from a faster model. No tools, no sandbox.

Sandbox

Each chat gets its own container with a persistent /workspace. Containers are removed when the chat is deleted.

Server access

In MAX mode DarkAI also has run_server_command, which runs on the Legion server itself under an unprivileged account. It can inspect processes, ports, logs, code and notes, and launch programs. The host filesystem is read-only for it: any write outside its own scratch directory is refused by the operating system, and secrets (.env, vault, SSH keys) are not readable. It has no sudo and no Docker access.

Access

You need an account. There is no subscription and no card.