CVE2CAPEC

Table of contents

1. Introduction
2. Installation
3. Usage
   • Update databases
   • Get new CVEs
   • License
   • Contact

Explore this repo data with our MITRE ATT&CK, MITRE D3FEND and MITRE ATLAS generator

Data generated by this project also serve the interactive MITRE ATT&CK, MITRE D3FEND and MITRE ATLAS generator available at https://galeax.github.io/CVE2CAPEC/.

click here for HD version

Introduction

This project allows you to manage get all new CVE with their CWE, CAPEC, MITRE ATT&CK, MITRE D3FEND and MITRE ATLAS Techniques. All CVE data are stored in database folder.

CVE2CAPEC does not need to be run by yourself. In fact, github actions update the database every day at 00:05 UTC so you can get the new CVE with all their data in results/new_cves.jsonl.

However, if you want to run this project by your own :

Installation

git clone https://github.com/Galeax/CVE2CAPEC.git
cd CVE2CAPEC
pip install -r requirements.txt

Update databases

python update_capec_db.py
python update_cwe_db.py
python update_technique_db.py
python update_defend_db.py
python update_atlas_db.py

Build the CVE - CWE - CAPEC - MITRE ATT&CK - MITRE D3FEND - MITRE ATLAS Techniques links

1. Get new CVEs

python retrieve_cve.py

2. Get CWEs from new CVEs

python cve2cwe.py

3. Get CAPECs from CWEs

python cwe2capec.py

4. Get MITRE ATT&CK Techniques from CAPECs

python capec2technique.py

5. Get MITRE D3FEND Techniques from MITRE ATT&CK Techniques

python technique2defend.py

6. Get MITRE ATLAS Techniques from MITRE ATT&CK Techniques

python technique2atlas.py

7. Build the lightweight CVE → CWE index used by the web interface

python build_web_index.py        # years of the new CVEs
python build_web_index.py --all  # full rebuild

Sources

• MITRE ATT&CK — Apache 2.0
• MITRE D3FEND — MIT
• MITRE ATLAS — data: mitre-atlas/atlas-data (Apache 2.0); embedded Navigator: mitre-atlas/atlas-navigator (Apache 2.0)
• CAPEC and CWE

License

This project is released under the GNU General Public License version 3 (the GPL).

For commercial use where you need to not be using the GPL, please contact us at contact [AT] galeax.com for additional options.

Contact

Made with ❤️ in 🇫🇷 by