Skip to content

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

Notifications You must be signed in to change notification settings

capstone-engine/capstone

Folders and files

NameName
Last commit message
Last commit date

Latest commit

747c9b6 · May 11, 2023
Apr 6, 2023
May 11, 2023
May 1, 2023
Dec 23, 2019
May 9, 2023
Aug 30, 2019
May 1, 2023
Apr 20, 2023
Jul 20, 2018
May 1, 2023
May 1, 2023
May 9, 2019
Apr 12, 2016
Jul 20, 2018
Mar 14, 2016
Mar 18, 2019
Jul 23, 2022
Jan 14, 2018
Apr 13, 2023
Jul 25, 2019
Apr 13, 2023
Apr 11, 2022
Apr 13, 2023
Apr 13, 2023
Apr 13, 2023
Apr 24, 2023
Feb 28, 2022
Apr 24, 2023
Feb 26, 2019
Feb 20, 2014
Nov 27, 2013
Feb 26, 2019
Mar 9, 2019
Jan 5, 2022
Jun 8, 2019
Feb 26, 2019
Apr 13, 2023
Mar 10, 2023
Apr 10, 2019
Apr 27, 2023
Feb 26, 2019
May 3, 2023
Dec 19, 2018
Feb 1, 2019
Apr 30, 2019
Apr 30, 2019
Mar 11, 2015
Jun 2, 2020
Apr 30, 2022
Jan 26, 2022
Jan 27, 2022
Apr 27, 2023
Apr 17, 2023
Oct 6, 2022
Jul 29, 2019
Oct 30, 2019
Apr 29, 2019
Feb 28, 2022
Oct 11, 2022
Apr 10, 2019

Repository files navigation

Capstone Engine

Build status pypi package pypi downloads oss-fuzz Status

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), BPF, Ethereum VM, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86 (16, 32, 64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight bindings for Swift, D, Clojure, F#, Common Lisp, Visual Basic, PHP, PowerShell, Emacs, Haskell, Perl, Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Vala ready either in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

Fuzz

See suite/fuzz/README.md for more information.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.