CVE2CAPEC

Get CVE, CWE, CAPEC, MITRE ATT&CK and MITRE D3FEND Techniques data automatically.
Try it online at https://galeax.github.io/CVE2CAPEC/.

Table of contents

1. Introduction
2. Installation
3. Usage
   • Update databases
   • Get new CVEs
   • License
   • Contact

Explore this repo data with our MITRE ATT&CK and MITRE D3FEND generator

Data generated by this project also serve the interactive MITRE ATT&CK and MITRE D3FEND generator available at https://galeax.github.io/CVE2CAPEC/.

click here for HD version

Introduction

This project allows you to manage get all new CVE with their CWE, CAPEC, MITRE ATT&CK and MITRE D3FEND Techniques. All CVE data are stored in database folder.

CVE2CAPEC does not need to be run by yourself. In fact, github actions update the database every day at 00:05 UTC so you can get the new CVE with all their data in results/new_cves.jsonl.

However, if you want to run this project by your own :

Installation

git clone https://github.com/Galeax/CVE2CAPEC.git
cd CVE2CAPEC
pip install -r requirements.txt

Update databases

python update_capec_db.py
python update_cwe_db.py
python update_technique_db.py
python update_defend_db.py

Build the CVE - CWE - CAPEC - MITRE ATT&CK - MITRE D3FEND Techniques links

1. Get new CVEs

python retrieve_cve.py

2. Get CWEs from new CVEs

python cve2cwe.py

3. Get CAPECs from CWEs

python cwe2capec.py

4. Get MITRE ATT&CK Techniques from CAPECs

python capec2technique.py

4. Get MITRE D3FEND Techniques from MITRE ATT&CK Techniques

python technique2defend.py

License

This project is released under the MIT license.

Contact

Made with ❤️ in 🇫🇷 by