capstone ☆

« Back to VersTracker

Description:
Multi-platform, multi-architecture disassembly framework

Type: Formula | Latest Version: 5.0.6@0 | Tracked Since: Dec 17, 2025

Links: Homepage | formulae.brew.sh

Category: Developer tools

Tags: disassembly reverse-engineering security binary-analysis framework

Install: brew install capstone

About:
Capstone is a lightweight, multi-platform, multi-architecture disassembly framework. It provides a unified API for disassembling machine code across various processor architectures, making it ideal for security analysis and reverse engineering tools. Its modular design and support for multiple languages make it a core component for building sophisticated binary analysis applications.

Key Features:

Supports multiple architectures (x86, ARM, MIPS, PowerPC, etc.)
Bindings for C, Python, Java, Ruby, and other languages
Lightweight and easily embeddable design
Distributed under a BSD license

Use Cases:

Reverse engineering and malware analysis
Binary instrumentation and rewriting
Security auditing and vulnerability research
Disassembler frontend development

Alternatives:

Zydis – Zydis is an x86/x86-64 focused disassembler library known for high performance, whereas Capstone offers broader architecture support.
Ghidra – Ghidra is a full-featured software reverse engineering suite, while Capstone is a lightweight library component used to build such tools.

License: BSD-3-Clause

Bottles available for: arm64_tahoe, arm64_sequoia, arm64_sonoma, arm64_ventura, sonoma, ventura, arm64_linux, x86_64_linux

Version History

Detected	Version	Rev	Change	Commit
Sep 30, 2024 11:34am		0	VERSION_BUMP	3e42a9dc