Skip to content

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

Notifications You must be signed in to change notification settings

capstone-engine/capstone

Folders and files

NameName
Last commit message
Last commit date

Latest commit

1abe186 · Feb 19, 2025
Feb 19, 2025
Apr 22, 2024
Jan 20, 2025
Feb 19, 2025
Jan 28, 2025
Sep 23, 2024
Jan 28, 2025
Dec 15, 2024
Jan 28, 2025
Jan 20, 2025
Jan 28, 2025
Feb 19, 2025
May 9, 2019
Sep 23, 2024
May 12, 2024
Mar 14, 2016
May 30, 2023
Nov 4, 2024
Jul 23, 2022
Nov 4, 2024
Jan 28, 2025
Jul 19, 2023
Jan 28, 2025
Jan 28, 2025
Apr 11, 2022
Jan 28, 2025
Sep 23, 2024
Jan 20, 2025
Jan 20, 2025
Jan 28, 2025
Jan 28, 2025
Feb 26, 2019
Sep 14, 2024
Feb 26, 2019
Mar 9, 2019
Nov 21, 2024
Sep 30, 2024
Sep 18, 2024
May 12, 2024
Jul 8, 2024
Jul 8, 2024
Sep 7, 2024
Sep 30, 2024
Jan 28, 2025
Jan 28, 2025
Jan 28, 2025
Jan 28, 2025
Jan 28, 2025
Sep 25, 2024
Dec 15, 2024
Dec 15, 2024
Aug 17, 2024
Dec 17, 2024
Jan 28, 2025
Aug 17, 2024
Jan 28, 2025
Jan 28, 2025
Oct 6, 2024
Jul 8, 2024
May 19, 2023
Jan 3, 2024
Jan 28, 2025
Aug 31, 2024
Dec 5, 2024
Sep 30, 2024

Repository files navigation

Capstone Engine

Build status pypi package pypi downloads oss-fuzz Status

Tip

Welcome to join our community group!  

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, AArch64, Alpha, ARC, BPF, Ethereum VM, LoongArch, HP PA-RISC (HPPA), M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86 (16, 32, 64), Xtensa.

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight bindings for Swift, D, Clojure, F#, Common Lisp, Visual Basic, PHP, PowerShell, Emacs, Haskell, Perl, Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Vala ready either in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at https://www.capstone-engine.org

Compile

See BUILDING.md file for how to compile and install Capstone.

Documentation

Contributing

See CONTRIBUTING.md for an intro.

Fuzz

See suite/fuzz/README.md for more information.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.