Capstone is a lightweight multi-platform, multi-architecture disassembly framework.
Highlight features
- Multi-architectures: Arm64 (v8), Mips, PowerPC, Sparc, SystemZ, XCore & X86 (include X86_64) (details).
- Clean/simple/lightweight/intuitive architecture-neutral API.
- Provide details on disassembled instruction (called “decomposer” by some others).
- Implemented in pure C language, with bindings for Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust & Vala available.
- Native support for Windows/*nix/iOS.
- Thread-safe by design.
- Special support for embedding into firmware or OS kernel.
- High performance & suitable for malware analysis (capable of handling various X86 malware tricks).
- Under BSD license.
Commercial Use
Modify
Distribute
Place Warranty
Hold Liable
Use Trademarks
Include Copyright
Include License
These details are provided for information only. No information here is legal advice and should not be used as such.
There are no reported vulnerabilities
30 Day SummaryAug 20 2025 — Sep 19 2025
|
12 Month SummarySep 19 2024 — Sep 19 2025
|