keystone
« Back to VersTracker
Description:
Assembler framework: Core + bindings
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Developer tools
Tags: assembler reverse-engineering security development llvm
Install: brew install keystone
About:
Keystone is a lightweight multi-platform, multi-architecture assembler framework. It provides a unified API for generating machine code for various CPU architectures, including x86, ARM, and MIPS. Its core value lies in its modular design, offering bindings for C, Python, Rust, and other languages, making it ideal for integration into security tools and reverse engineering frameworks.
Key Features:
  • Supports multiple architectures (x86, ARM, MIPS, etc.)
  • Bindings for C, Python, Rust, and Go
  • Lightweight and thread-safe
  • Simple, unified API
Use Cases:
  • Building custom disassemblers or debuggers
  • Implementing JIT compilers
  • Creating shellcode generation tools
  • Reverse engineering and malware analysis
Alternatives:
  • Ghidra – Ghidra is a full-featured suite including a disassembler and decompiler, whereas Keystone focuses solely on assembly.
  • Capstone – Capstone is the companion disassembler framework to Keystone's assembler.
Version History
Detected Version Rev Change Commit
Sep 11, 2025 1:09pm 0 VERSION_BUMP 8b435dc6
Oct 12, 2024 5:39am 0 VERSION_BUMP 91810a4b
Oct 11, 2024 9:41pm 0 VERSION_BUMP 673c6e63