Acknowledgments

castiel builds on open data and open tools. The catalogs bundled with the harness are generated from the following sources:

MITRE ATT&CK

The bundled MITRE ATT&CK technique catalog (generated by scripts/extract_attack_techniques.py) uses MITRE ATT&CK® data from attack-stix-data. ATT&CK® is a registered trademark of The MITRE Corporation.

Kali tools

The Kali tool catalog (scripts/extract_kali_tools.py) is built from the Kali tools documentation.

Vulnerability intelligence

• CVE search and details come from the CVE Program search and CVE Services APIs.
• Known-exploited flags come from CISA Vulnrichment.
• Public proof-of-concept code comes from PoC-in-GitHub.

Web search

Web search uses FreeSerp.

License

This project is licensed under the GPL-3.0 license.