- Notifications
You must be signed in to change notification settings - Fork1.6k
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
capstone-engine/capstone
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
Capstone is a disassembly framework with the target of becoming the ultimatedisasm engine for binary analysis and reversing in the security community.
Created by Nguyen Anh Quynh, then developed and maintained by a small community,Capstone offers some unparalleled features:
Support multiple hardware architectures: ARM, AArch64, Alpha, ARC, BPF, Ethereum VM,LoongArch, HP PA-RISC (HPPA), M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH,Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86 (16, 32, 64), Xtensa.
Having clean/simple/lightweight/intuitive architecture-neutral API.
Provide details on disassembled instruction (called “decomposer” by others).
Provide semantics of the disassembled instruction, such as list of implicitregisters read & written.
Implemented in pure C language, with lightweight bindings for Swift, D, Clojure, F#,Common Lisp, Visual Basic, PHP, PowerShell, Emacs, Haskell, Perl, Python,Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Valaready either in main code, or provided externally by the community).
Native support for all popular platforms: Windows, Mac OSX, iOS, Android,Linux, *BSD, Solaris, etc.
Thread-safe by design.
Special support for embedding into firmware or OS kernel.
High performance & suitable for malware analysis (capable of handling variousX86 malware tricks).
Distributed under the open source BSD license.
Further information is available athttps://www.capstone-engine.org
SeeBUILDING.md file for how to compile and install Capstone.
- Useful links and tutorials:docs/README
- Software architecture overview:docs/ARCHITECTURE.md
- Testing documentation:tests/README.md
- Updater (Auto-Sync) documentation:suite/auto-sync/README.md
SeeCONTRIBUTING.md for an intro.
See suite/fuzz/README.md for more information.
This project is released under the BSD license. If you redistribute the binaryor source code of Capstone, please attach file LICENSE.TXT with your products.
About
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.