This plugin adds a TreeView to the Havoc UI that displays all MITRE enterprise tactics, techniques and sub-techniques in an ordered fashion. This repository also includes parse_mitre.py, a tool that fetches the current TTPs directly from the MITRE framework and stores them in a JSON file, which is then used by the plugin.

After cloning the repository, it is first necessary to fetch the MITRE data by running the following command. After completion, the script will have created tactics.json in the /tmp directory. The script requires the python bs4 and requests packages, which can be installed with pip.

pip3 install bs4
pip3 install requests

python3 parse_mitre.py

To load the plugin into Havoc, click on Scripts, then Script Manager and Load Script. Select the mitre4havoc.py file in the opened dialog. Afterwards, a new tab called MITRE should appear in the menu bar at the top. Click on it and select Open view to open the MITRE tree view.