Show HN: Generate Mitre ATT&CK from a List of CVE

galeax.github.io

2 points

2 years ago

CVE2CAPEC is a free tool to generate a MITRE ATT&CK Navigator from a list of CVE.

MITRE ATT&CK is a framework that you can use to see the links between multiple security findings (here vulnerabilities from the CVE database). MITRE ATT&CK represents the path an attacker could use on your information system, aka "KillChain".

CVE2CAPEC is built on an open source repo https://github.com/Galeax/CVE2CAPEC/ with JSON data about CVE, CWE, CAPEC, and MITRE ATTACK Techniques, that you can use for your own projects as well.

Feel free to play with it and to open any issue if your need other features!