recon. exploit. report.

castiel is an AI-assisted penetration testing harness that pairs your workspace with the language model of your choice.

Download for WindowsDocs
$irm https://iso53.github.io/castiel/install.ps1 | iex

installs the latest release · all install options

castielPowerShell

▌

castiel

No hosts, segments or domains discovered yet.

As recon fills network.json, the topology will grow here. Click any node for its full details.

Agentsnone active

Sub-agents delegated by the agent appear here.

Run a full external pentest against meridianfreight.com — the apex domain and every subdomain are in scope. Enumerate the attack surface, map the network and web app, test what you find, and keep the workspace documents up to date as you go. No social engineering, no DoS.

56.1%

Your models, your choice

Use your preferred provider with your own subscription or API-billed models.

  • llama.cpp
  • Ollama
  • OpenRouter
  • Cline
  • z.ai

The whole engagement, run through a single chat.

castiel is an AI-assisted penetration testing harness. Open a project folder and connect a language model of your choice. From there, everything happens in a chat: the model runs commands, reads and edits files, launches background processes and connects to MCP servers, organizing what it finds into structured documents you can review as graphs, boards and tables. You stay in charge. You define the target and scope, decide when the engagement moves to the next phase, and approve how far things go, while the model does the hands-on technical work and keeps every finding recorded in the workspace.

Why castiel

Chat-driven engagements

Open a workspace, connect a model, and run the whole engagement through a chat. castiel runs the hands-on technical work and keeps everything recorded.

Bring your own model

llama.cpp, Ollama, OpenRouter or Cline. castiel talks to the model of your choice. Local or cloud-based.

Structured findings

Findings land in structured documents you can review as graphs, boards and tables.

Background processes

Long-running scans, started by you or the agent, keep working while the conversation continues.

MCP-native

Connect obscura, Caido or any MCP server and its tools become available to the agent.

You stay in control

You define the target and the scope. Decide when the engagement moves to the next phase.

  • Planning & Pre-Engagement

    In this phase, castiel talks scope and rules of engagement with you while gathering passive OSINT. No traffic reaches the target yet.

  • Reconnaissance

    In this phase, castiel freely interacts with in-scope targets to map the attack surface into network, web and identity documents.

  • Scanning & Vulnerability Assessment

    In this phase, castiel probes in-scope targets for weaknesses and scores every finding with dual CVSS vectors before it counts.

  • Exploitation

    In this phase, castiel exploits the vulnerabilities confirmed so far and reports every attempt and its result back to you.

Install

Download, extract, run. No Java, no Maven, no npm.

Download for Windows

Expand-Archive castiel.zip, then run .\castiel\castiel.exe

Pick a target.
See what breaks

Download castiel Read the docs

Free & open source — GPL-3.0.