Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Running on Windows, Mac OS X, Linux, FreeBSD, OpenBSD, and Solaris, it can disassemble ARM, ARM64 (ARMv8), MIPS, PPC, and x86 architectures. Capstone provides rich details about disassembled instructions along with useful semantic information.
|Tags||disassembly framework reverse binary x86 x86-64 arm arm64 aarch64 MIPS PPC PowerPC Engine|
|Operating Systems||Windows macosx Linux FreeBSD OpenBSD Solaris|
|Implementation||C Python Java OCaml C# Ruby Go Vala|
Release Notes: This release fixes some bugs deep inside the core, involving Arm, Arm64, Mips, and X86. There is no update to the API interface, so bindings of the older version 2.1 are compatible, and can still be used with this release.
Release Notes: Fixes a buffer overflow bug in Thumb mode (ARM). For this reason, all ARM users should upgrade. Fixes a crash when embedding Capstone into the Mac OS X kernel by reducing the stack memory usage. This should also enable Capstone to be embedded into other systems with similarly limited stack memory size, such as the Linux kernel on some firmware. Uses a proper SONAME for library versioning (Linux).