capec

The Correlated CVE Vulnerability And Threat Intelligence Database API

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting" by Erik Hemberg, Jonathan Kelly, Michal Shlapentokh-Rothman, Bryn Reinstadler, Katherine Xu, Nick Rutar, Una-May O'Reilly

Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions

Open Source Tool - Cybersecurity Graph Database in Neo4j

FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.

Severity scoring and exploit categorisation for vulnerability reports using machine-learning tools.

AutoSecGPT is an AI-power tool that supports security teams to model threats associated with their automotive application to ease the process of conducting TARA.

Correlate NVD datasets wIth CWE/CAPEC/CVSS labels for customised usage. Plus static analysis and data visualisation.

Security R package with a set of utils to analyse the different industry standards (MITRE and NIST).

Capec interactive visualization using graph database and d3.js rendering library

MCP server for CIRCL's Vulnerability-Lookup (CVE Search) — query CVE, CWE, CAPEC and vendor vulnerability data.

A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.

Neo4j graph for CAPEC data

Interactive Editor for creating & annotating enriched Cyber Kill Chains by mapping MITRE ATT&CK, CAPEC, CWE & STIX 2.1 Objects to the Unified Kill Chain framework. Drag-and-drop interface with metadata, confidence scoring, and export capabilities. Track complex kill chains and combine TTPs with atomic IOCs easily.

Security Knowledge Graph Triples

A small python script that enriches Vulnerability STIX Objects with other intel

A multi-label classifier to categorize text in one of the STRIDE categories

RAG-grounded SOC alert triage: Wazuh alerts classified via deterministic MITRE ATT&CK/CAPEC/CWE/CVE retrieval, calibrated confidence scoring, and automated NIST-compliant incident reporting. FastAPI + ChromaDB + PostgreSQL + React + Gemini 3.5 Flash Lite.

[CYBERSECURITY PROJECT] As an IT student and a cybersecurity thesis assistant in the French laboratory IRISA, I searched how to extract the vulnerability assets from CAPEC. I used R language to do XML extraction and processes of VA extraction. A BASH application has been written and allows to use this tool thanks a command prompt (Linux Distribu…