Capstone
A lightweight multi-architecture disassembly framework for binary analysis and reverse engineering.
What is Capstone?
Capstone is a disassembly framework that converts machine code into human-readable assembly instructions across numerous CPU architectures. It solves the problem of needing a unified, high-performance tool for binary analysis, reverse engineering, and security research. The framework provides detailed instruction semantics and is designed for easy integration into various applications.
Security researchers, reverse engineers, malware analysts, and developers working on low-level systems, firmware, or binary instrumentation tools.
Developers choose Capstone for its extensive architecture support, clean API, and detailed instruction decomposition, making it a versatile and efficient alternative to architecture-specific disassemblers. Its BSD license and community-driven bindings facilitate integration into both open-source and commercial projects.
Overview
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Use Cases
Best For
- Reverse engineering binaries from multiple CPU architectures
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
