CVE2CAPEC

Get CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data automatically.
Try it online at https://galeax.github.io/CVE2CAPEC/.

Table of contents

1. Introduction
2. Installation
3. Usage
   • Update databases
   • Get new CVEs
   • License
   • Contact

Explore this repo data with our MITRE ATT&CK generator

Data generated by this project also serve the interactive MITRE ATT&CK generator available at https://galeax.github.io/CVE2CAPEC/.

click here for HD version

Introduction

This project allows you to manage get all new CVE with their CWE, CAPEC and MITRE ATT&CK Techniques. All CVE data are stored in database folder.

CVE2CAPEC does not need to be run by yourself. In fact, github actions update the database every day at 00:05 UTC so you can get the new CVE with all their data in results/new_cves.jsonl.

However, if you want to run this project by your own :

Installation

git clone https://github.com/Galeax/CVE2CAPEC.git
cd CVE2CAPEC
pip install -r requirements.txt

Update databases

python update_capec.py
python update_cwe.py
python update_technique.py

Build the CVE - CWE - CAPEC - MITRE ATT&CK Techniques links

1. Get new CVEs

python retrieve_cve.py

2. Get CWEs from new CVEs

python cve2cwe.py

3. Get CAPECs from CWEs

python cwe2capec.py

4. Get MITRE ATT&CK Techniques from CAPECs

python capec2technique.py

License

This project is released under the MIT license.

Contact

Made with ❤️ in 🇫🇷 by