The Capstone disassembly framework provides a lightweight, multi-platform engine for binary analysis and reverse engineering, supporting numerous architectures including ARM, RISC-V, X86, and the Ethereum Virtual Machine.
Key Points
- Supports a wide range of architectures including ARM64, PowerPC, MIPS, WebAssembly, and X86.
- Implemented in pure C with extensive language bindings for Python, Rust, Go, Java, and others.
- Features a thread-safe, architecture-neutral API suitable for embedding in firmware and OS kernels.
- Distributed under the open-source BSD license and optimized for high-performance malware analysis.
- Recent updates include versions 6.0.0-Alpha9 and 5.0.9, addressing multiple security advisories and CVE patches.