github.devotd.
NewSecurity

capstone-engine/capstone 6.0.0-Alpha11 — Multi-architecture disassembly

A summary of the latest release 6.0.0-Alpha11 of capstone-engine/capstone, a C disassembly framework that turns machine code into human-readable instructions, and the scope that can be confirmed.

Repositorycapstone-engine/capstone ↗

A summary of the latest release 6.0.0-Alpha11 of capstone-engine/capstone, a C disassembly framework that turns machine code into human-readable instructions, and the scope that can be confirmed.

GitHub description: Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

stars
★ 9.1K
Forks
1.7K
Language
C
Latest release
6.0.0-Alpha11
Read original source ↗View on GitHub ↗

capstone-engine/capstone is a disassembly framework that turns machine code into human-readable instructions. The latest release published by the repository is 6.0.0-Alpha11, and the provided information contains no changelog for this release. It supports several hardware architectures, including ARM, ARM64, X86, RISC-V and Webassembly, through an architecture-neutral API, and the implementation language is C.

What this project is for is binary analysis and reverse engineering. It goes beyond listing instructions and also returns the details of each disassembled instruction together with implicit register read and write information, which means you can see which registers are read and which are written. It supports bindings for several languages and several platforms, and it documents the environments in which it is embedded in firmware and OS kernels, along with thread safety. The README states that its performance suits malware analysis. The repository has 9119 stars.

Still, the point where the judgment stops is clear. The repository metadata carries no license label, and the statement that it is distributed under the BSD license appears only in the README. The momentum score came out low at 1.7 out of 10, and the novelty, technology and quality items were given no figures. The release is also labeled Alpha11, so it is hard to call it a stable version. No performance numbers or benchmarks are presented, so it is hard to say whether it stands above or below other tools.