Capstone is a multi-architecture disassembly framework and binary analysis engine. It translates raw machine code from various CPU architectures, such as x86, ARM, and RISC-V, into human-readable assembly instructions.
capstone-engine/capstone 的主要功能包括:Binary Disassembly, Disassembler Frameworks, Multi-Architecture Engines, Compiled Code Analysis, Binary Analysis Tools, Resilient Disassembly, Stream Resynchronization, Cross-Architecture Binary Analysis。
capstone-engine/capstone 的开源替代品包括: aquynh/capstone — Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… zyantific/zydis — Zydis is an x86 and x86-64 binary analysis library that provides a framework for decoding machine code and inspecting… jonathansalwan/ropgadget — ROPgadget is a binary analysis tool and multi-architecture disassembler designed to locate instructional sequences… radareorg/radare2 — Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a… lief-project/lief — LIEF is a framework for parsing, modifying, and analyzing executable binary formats and system shared caches across…
Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code into human-readable assembly instructions for a wide variety of hardware instruction set architectures and virtual machines. The framework supports a diverse range of targets, including x86, ARM, RISC-V, and MIPS, as well as virtual machine environments like WebAssembly and the Ethereum Virtual Machine. It functions as an instruction analysis tool capable of extracting granular decomposition data and semantic information from disassembled code. The engine is designed for low-
radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p
Zydis is an x86 and x86-64 binary analysis library that provides a framework for decoding machine code and inspecting the technical attributes of processor instructions. It functions as an instruction disassembler that translates binary data into structured instruction metadata and human-readable assembly. The project includes a machine code encoder for converting assembly instructions and operands back into their binary representations. It also provides an assembly syntax formatter to transform decoded instruction structures into assembly text strings using configurable syntax styles. The l
ROPgadget is a binary analysis tool and multi-architecture disassembler designed to locate instructional sequences used for return-oriented programming. It functions as an exploit development framework that identifies gadgets within binaries to facilitate the creation of memory corruption exploits. The tool supports cross-architecture binary auditing, processing machine code from x86, ARM, MIPS, and RISC-V. It provides a unified interface for analyzing diverse executable file formats, including ELF, PE, and Mach-O. Its capabilities cover binary vulnerability analysis and exploit payload deve