macOS
brew install capstonelocal Homebrew formula metadata
sudo port install capstoneMacPorts ports tree · devel/capstone/Portfile · Quelle: api.github.com
brew
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für capstone in AI-Agent-Workflows.
Installation
brew install capstonelocal Homebrew formula metadata
sudo port install capstoneMacPorts ports tree · devel/capstone/Portfile · Quelle: api.github.com
sudo apk add capstoneAlpine Linux edge package indexes · capstone · Quelle: dl-cdn.alpinelinux.org
sudo dnf install capstoneFedora Rawhide package metadata · capstone · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#capstonenixpkgs package indexes · pkgs/by-name/ca/capstone/package.nix · Quelle: api.github.com
sudo pacman -S capstoneArch Linux sync databases · capstone · Quelle: geo.mirror.pkgbuild.com
sudo zypper install capstoneopenSUSE Tumbleweed package metadata · capstone · Quelle: download.opensuse.org
sudo apt install capstone-toolDebian stable package indexes · capstone-tool · Quelle: deb.debian.org
scoop install main/capstoneScoop official bucket manifest trees · bucket/capstone.json · Quelle: api.github.com
Überblick
Multi-platform, multi-architecture disassembly framework
Verlauf
Capstone is a lightweight, multi-platform, multi-architecture disassembly framework used in binary analysis, malware analysis, reverse engineering, and security tooling.
The official README says Capstone was created by Nguyen Anh Quynh and then developed and maintained by a small community. Its goal is to be an architecture-neutral disassembly engine for binary analysis and reversing in the security community.
Capstone's official site emphasizes a pure-C core, a simple API, detailed instruction decomposition, implicit register semantics, thread safety, embedding support for firmware or kernels, and native support across Windows, macOS, iOS, Android, Linux, BSD, Solaris, and other Unix-like systems.
The project appeared publicly on GitHub in 2013 and was presented in technical form at Black Hat USA 2014. By 2026 the official download page listed 6.0.0-Alpha9 as the current version, while GitHub releases showed active 5.x maintenance and 6.x alpha development.
Capstone became widely adopted because reverse-engineering tools needed a reusable disassembler library rather than every project owning architecture-specific decode code. The official site collects testimonials from reverse engineers and tool authors calling it a standard or gold standard disassembly engine.
The official documentation documents repository installation across Homebrew, MacPorts, Debian, Ubuntu, FreeBSD, OpenBSD, NetBSD, and Python packaging. The batch package metadata adds Alpine, Fedora, Nix, Arch, Scoop, and openSUSE, which reflects broad cross-platform packaging.
Developers embed Capstone as a library to disassemble bytes for many CPU architectures and retrieve instruction details. The Homebrew package also provides cstool, a command-line utility for quick disassembly tasks.
Capstone is used in reverse-engineering frameworks, malware-analysis tools, debuggers, firmware analysis, exploit research, and educational tooling. Bindings listed by the official site and README cover many languages, making the C engine available beyond C and C++ applications.
Capstone is package-nerd significant because it is a foundational native library with many downstream language bindings. A system package can satisfy C/C++ consumers, Python users, command-line users, and reverse-engineering tools that dynamically link against the same engine.
It also illustrates a common packaging headache: a security-oriented C library with fast-moving architecture support, multiple major branches, Python wheels, bindings outside the main tree, and tools that expect the CLI, headers, and shared library to line up.
Sicherheitslage
narrow executable package without higher-risk signals.
grün Risiko · niedrig Konfidenz · appliance
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
cstool | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://github.com/capstone-engine/capstone
Installationsmetadaten
| Paketschlüssel | brew:capstone |
|---|---|
| Version | 5.0.9 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/capstone |
| Homepage | https://www.capstone-engine.org/ |
| Repository | https://github.com/capstone-engine/capstone |
| Upstream-Dokumentation | https://www.capstone-engine.org/documentation.html |
| Lizenz | BSD-3-Clause |
| Quellarchiv | https://github.com/capstone-engine/capstone/archive/refs/tags/5.0.9.tar.gz |
| Zuletzt aktualisiert | 2026-05-28T18:49:05Z |
| Pulse | updated |
| Abhängigkeiten | gettext |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | capstone |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
capstone-tool 5.0.7-1~deb13u1
lightweight multi-architecture disassembly framework - command line tool
https://www.capstone-engine.org/
sudo apt install capstone-toollibcapstone-dev 5.0.7-1~deb13u1
lightweight multi-architecture disassembly framework - devel files
https://www.capstone-engine.org/
sudo apt install libcapstone-devlibcapstone5 5.0.7-1~deb13u1
lightweight multi-architecture disassembly framework - library
https://www.capstone-engine.org/
sudo apt install libcapstone5python3-capstone 5.0.7-1~deb13u1
lightweight multi-architecture disassembly framework - Python bindings
https://www.capstone-engine.org/
sudo apt install python3-capstonecapstone
nix profile install nixpkgs#capstonecapstone-tool 4.0.2-5.1build1
lightweight multi-architecture disassembly framework - command line tool
https://www.capstone-engine.org/
sudo apt install capstone-toollibcapstone-dev 4.0.2-5.1build1
lightweight multi-architecture disassembly framework - devel files
https://www.capstone-engine.org/
sudo apt install libcapstone-devlibcapstone4 4.0.2-5.1build1
lightweight multi-architecture disassembly framework - library
https://www.capstone-engine.org/
sudo apt install libcapstone4python3-capstone 4.0.2-5.1build1
lightweight multi-architecture disassembly framework - Python bindings
https://www.capstone-engine.org/
sudo apt install python3-capstonecapstone 5.0.9-r0
The Ultimate Disassembler
https://www.capstone-engine.org
sudo apk add capstonecapstone-dev 5.0.9-r0
The Ultimate Disassembler (development files)
https://www.capstone-engine.org
sudo apk add capstone-devcapstone-static 5.0.9-r0
The Ultimate Disassembler (static library)
https://www.capstone-engine.org
sudo apk add capstone-staticcstool 5.0.9-r0
cstool for capstone disassembler
https://www.capstone-engine.org
sudo apk add cstoolpy3-capstone 5.0.9-r0
The Ultimate Disassembler (for python3)
https://www.capstone-engine.org
sudo apk add py3-capstonepy3-capstone-pyc 5.0.9-r0
Precompiled Python bytecode for py3-capstone
https://www.capstone-engine.org
sudo apk add py3-capstone-pyccapstone 5.0.6-5.fc45
A lightweight multi-platform, multi-architecture disassembly framework
http://www.capstone-engine.org/
sudo dnf install capstoneQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.