capec 开源项目推荐（30 个）

toolswatch /vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

Galeax /CVE2CAPEC

从CVE列表生成MITRE AT&CK和D3FEND。包含CVE、CWE、CAPEC、MITRE ATT&CK D3FEND和ATLAS技术数据的数据库每日更新。在2025年BlackHat Europe Arsenal展会上亮相。

ALFA-group /BRON

"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting" by Erik Hemberg, Jonathan Kelly, Michal Shlapentokh-Rothman, Bryn Reinstadler, Katherine Xu, Nick Rutar, Una-May O'Reilly

vfeedio /pyvfeed

Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions

amberzovitis /GraphKer

Open Source Tool - Cybersecurity Graph Database in Neo4j

binareio /FastCVE

FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.

Yuning-J /VulnerabilityClassifier

Severity scoring and exploit categorisation for vulnerability reports using machine-learning tools.

Majid-Mollaeefar /auto-sec-gpt

AutoSecGPT is an AI-power tool that supports security teams to model threats associated with their automotive application to ease the process of conducting TARA.

Yuning-J /NVDFeatureAnalysis

Correlate NVD datasets wIth CWE/CAPEC/CVSS labels for customised usage. Plus static analysis and data visualisation.

r-net-tools /net.security

Security R package with a set of utils to analyse the different industry standards (MITRE and NIST).

Cyreslab-AI /circl-cve-search-mcp-server

MCP server for CIRCL's Vulnerability-Lookup (CVE Search) — query CVE, CWE, CAPEC and vendor vulnerability data.

alexis- /Capec-Visualization

Capec interactive visualization using graph database and d3.js rendering library

muchdogesec /arango_cti_processor

A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.

alexis- /Capec2Neo4j

Neo4j graph for CAPEC data

Pr0cella /AttackFlow

Interactive Editor for creating & annotating enriched Cyber Kill Chains by mapping MITRE ATT&CK, CAPEC, CWE & STIX 2.1 Objects to the Unified Kill Chain framework. Drag-and-drop interface with metadata, confidence scoring, and export capabilities. Track complex kill chains and combine TTPs with atomic IOCs easily.

S0UGATA /security-kg

Security Knowledge Graph Triples

muchdogesec /arango_cve_processor

A small python script that enriches Vulnerability STIX Objects with other intel

sebyakuya /stride-classifier

A multi-label classifier to categorize text in one of the STRIDE categories

nicolabalzano /DetectiveAttacks

DetectiveAttacks aims to simplify the process of mitigating cyber attacks directed toward digital infrastructure.

Healpler /ArchwareExtraction

[CYBERSECURITY PROJECT] As an IT student and a cybersecurity thesis assistant in the French laboratory IRISA, I searched how to extract the vulnerability assets from CAPEC. I used R language to do XML extraction and processes of VA extraction. A BASH application has been written and allows to use this tool thanks a command prompt (Linux Distribu…