Common Attack Pattern Enumeration and Classification

CAPEC is a MITRE Corporation (MITRE)-maintained catalogue of typical attack patterns, such as SQL injection or session hijacking. Each pattern describes prerequisites, execution and mitigations and is linked to the weaknesses exploited (CWE). CAPEC thus describes the attacker's side of what CWE describes on the defect side.