Help
RSS
API
Feed
Maltego
Contact
Domain > www.capstone-engine.org
×
Welcome!
Right click nodes and scroll the mouse to navigate the graph.
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2013-12-23
216.34.181.97
(
ClassC
)
2024-09-14
185.199.110.153
(
ClassC
)
Port 80
HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 22452Server: GitHub.comContent-Type: text/html; charsetutf-8Last-Modified: Wed, 05 Jul 2023 16:57:32 GMTAccess-Control-Allow-Origin: *ETag: 64a5a0fc-57b4expires: Sat, 14 Sep 2024 01:25:31 GMTCache-Control: max-age600x-proxy-cache: MISSX-GitHub-Request-Id: 37FA:3A041D:50D4C4F:52D7FA8:66E4E3B2Accept-Ranges: bytesAge: 0Date: Sat, 14 Sep 2024 01:15:31 GMTVia: 1.1 varnishX-Served-By: cache-bfi-krnt7300100-BFIX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726276531.112003,VS0,VE66Vary: Accept-EncodingX-Fastly-Request-ID: a78862b4a5573cbde70a5d1c01b6f3975bcba02e !DOCTYPE html>html> head> title>The Ultimate Disassembly Framework – Capstone – The Ultimate Disassembler/title> meta charsetutf-8 /> meta contenttext/html; charsetutf-8 http-equivContent-Type> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0> meta namedescription contentThe Ultimate Disassembler> meta propertyog:description contentThe Ultimate Disassembler /> meta nameauthor contentCapstone /> meta propertyog:title contentThe Ultimate Disassembly Framework /> meta propertytwitter:title contentThe Ultimate Disassembly Framework /> link relicon typeimage/png sizes16x16 href/16x16.png> link relicon typeimage/png sizes24x24 href/24x24.png> link relicon typeimage/png sizes32x32 href/32x32.png> link relicon typeimage/png sizes48x48 href/48x48.png> link relicon typeimage/png sizes64x64 href/64x64.png> link relicon typeimage/png sizes96x96 href/96x96.png> link relicon typeimage/png sizes128x128 href/128x128.png> link relicon typeimage/png sizes256x256 href/256x256.png> link relicon typeimage/png sizes512x512 href/512x512.png> link relmanifest href/manifest.json> meta namemsapplication-TileColor content#ffffff> meta namemsapplication-TileImage content/ms-icon-144x144.png> meta nametheme-color content#ffffff> !--if lt IE 9> script srchttp://html5shiv.googlecode.com/svn/trunk/html5.js>/script> !endif--> link relstylesheet typetext/css href/style.css /> link relalternate typeapplication/rss+xml titleCapstone - The Ultimate Disassembler href/feed.xml /> !-- Created with Jekyll Now - http://github.com/barryclark/jekyll-now --> /head> body> div classwrapper-footer> div classcontainer> footer classsponsor> div alignright>a hrefhttps://www.vsec.com.vn/en/>img border0 titleRelease sponsor src/img/vsec.png height35>/a>a hrefhttps://verichains.io>img border0 titleRelease sponsor src/img/verichains2.png height35>/a>a hrefhttps://canary.tools>img border0 titleRelease sponsor src/img/thinkst.png height35 stylemargin: 0px 10px>/a>a hrefhttps://www.nowsecure.com>img border0 titleRelease sponsor src/img/nowsecure.png height35>/a>a hrefhttps://senrio.com>img border0 titleRelease sponsor src/img/xipiter.png height35>/a>a hrefhttps://catenacyber.fr>img border0 titleRelease sponsor src/img/catena.png height35>/a>/div> /footer> /div> /div> div classwrapper-masthead> div classcontainer> header classmasthead clearfix> a href/ classsite-avatar>img src/img/capstone.png />/a> div classsite-info> h1 classsite-name>a href/>Capstone/a>/h1> p classsite-description>The Ultimate Disassembler/p> /div> nav> a href/download.html>Download/a> a href/documentation.html>Docs/a> a href/showcase.html>Showcase/a> a href/testimonial.html>Testimonials/a> a href/donate.html>Donate/a> a href/contact.html>Contact/a> /nav> /header> /div> /div> div idmain rolemain classcontainer> h2 idwelcome>Welcome/h2>p>strong>Capstone/strong> is a lightweight multi-platform, multi-architecture disassembly framework./p>p>Our target is to make Capstone the ultimate disassembly engine for binary analysis and reversing in the security community./p>h3 idhighlight-features>Highlight features/h3>ul> li> p>Multi-architectures: em>ARM/em>, em>ARM64/em> (em>ARMv8/em>), em>BPF/em>, em>Ethereum VM/em>, em>M68K/em>, em>M680X/em>, em>Mips/em>, em>MOS65XX/em>, em>PowerPC/em>, em>RISC-V/em>, em>SH/em>, em>Sparc/em>, em>SystemZ/em>, em>TMS320C64X/em>, em>TriCore/em>, em>Webassembly/em>, em>XCore/em> and em>X86/em> (16, 32, 64)./p> /li> li> p>Clean/simple/lightweight/intuitive architecture-neutral API./p> /li> li> p>Provide details on disassembled instruction (called “decomposer” by some others)./p> /li> li> p>Provide some semantics of the disassembled instruction, such as list of implicit registers read & written./p> /li> li> p>Implemented in pure C language, with bindings for em>D/em>, em>Clojure/em>, em>F#/em>, em>Common Lisp/em>, em>Visual Basic/em>, em>PHP/em>, em>PowerShell/em>, em>Haskell/em>, em>Perl/em>, em>Python/em>, em>Ruby/em>, em>C#/em>, em>NodeJS/em>, em>Java/em>, em>GO/em>, em>C++/em>, em>OCaml/em>, em>Lua/em>, em>Rust/em>, em>Delphi/em>, em>Free Pascal/em> & em>Vala/em> available./p> /li> li> p>Native support for em>Windows/em> & *nix (with em>Mac OSX/em>, em>iOS/em>, em>Android/em>, em>Linux/em>, *BSD & em>Solaris/em> confirmed)./p> /li> li> p>Thread-safe by design./p> /li> li> p>Special support for embedding into firmware or OS kernel./p> /li> li> p>High performance & suitable for malware analysis (capable of handling various em>X86/em> malware tricks)./p> /li> li> p>Distributed under the open source em>BSD/em> license./p> /li>/ul>p>br />Some of the reasons making Capstone unique are elaborated a hreffeatures.html>here/a>./p>p>Find in this a href/BHUSA2014-capstone.pdf>Blackhat USA 2014 slides/a> more technical details behind our disassembly engine./p>h3 idtestimonials>Testimonials/h3>blockquote> p>i>“Capstone is something people have wanted for years; the value is apparent in the implementation, and it’s nice to finally have an industry standard for this”./i>– George “Geohot” Hotz./p>/blockquote>blockquote> p>i>“Capstone has changed the Reverse Engineering landscape: We finally have a solid, independent, and free disassembler engine”./i>– Felix “FX” Lindner./p>/blockquote>blockquote> p>i>“Capstone will soon be the standard disassembly engine”./i>– Bruce Dang./p>/blockquote>blockquote> p>i>“Capstone solves a well known issue in the reversing community by a well tested and maintained library for most common architectures using a generic API”./i>– Pancake./p>/blockquote>blockquote> p>i>“And, nowadays, Capstone is the best embeddable disassembler out there”./i>– Joxean Koret./p>/blockquote>blockquote> p>i>“I must have mentioned it at least 25 times today with our client. Not sure yet, but this engine might just be the gold standard”./i>– Stephen Ridley./p>/blockquote>blockquote> p>i>“Developers of Capstone provide great support. Its small size and high modularity makes it perfectly working in kernel as well!”./i>– Peter Hlavaty./p>/blockquote>blockquote> p>i>“Love at first sight! Beautiful API, support latest instructions, Capstone truly is the ultimate disassembly framework!”./i>– Ole André Vadla Ravnås./p>/blockquote>blockquote> p>i>“Simply the best - recommended to anyone asking which disassembler to use!”./i>– Jurriaan Bremer./p>/blockquote>blockquote> p>i>“The most complete disassembler library available for the reverse engineering and information security communities”./i>– Pedro “osxreverser” Vilaça./p>/blockquote>blockquote> p>i>“The API is straightforward and easy to work with, and on the few occasions we have run into issues the Capstone developers have provided bug fixes, new features, and support in a matter of hours”./i>– Sean Heelan./p>/blockquote>blockquote> p>i>“I expect Capstone to become the standard, a stepping stone for all projects everywhere”./i>– Ange Albertini./p>/blockquote>p>See complete testimonials for Capstone a hreftestimonial.html>here/a>./p>hr />div classposts>article classpost>h2>a href/Version-5.0>Version 5.0/a>/h2>div classdate>July 5, 2023/div>div classentry>p>We are very happy to announce version strong>5.0/strong> of Capstone disassembler framework!/p>p>This release fixes a lot of bugs and adds few new architectures. We strongly encourage all users of v4 to upgrade./p>p>We wish to express our sincere gratitude to all a hrefhttps://github.com/capstone-engine/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supported us to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/capstone-engine/capstone/archive/refs/tags/5.0.zip>zip/a> & a hrefhttps://github.com/capstone-engine/capstone/archive/refs/tags/5.0.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/capstone-engine/capstone/releases/tag/5.0>5.0/a> in our Github repo./p>p>We are planning for the next major release, version em>6.0/em>. Stay tuned for updates!/p>/div>/article>article classpost>h2>a href/Version-4.0.2>Version 4.0.2/a>/h2>div classdate>May 8, 2020/div>div classentry>p>We are very happy to announce version strong>4.0.2/strong> of Capstone disassembler framework!/p>p>This release fixes some bugs of v4.0.1, as well as introduces some improvements for several bindings. We strongly encourage all users of v4.0.1 to upgrade./p>p>In no particular order, we would like to thank a hrefhttps://xipiter.com>Xipiter/a> and a hrefhttps://catenacyber.fr>Catena Cyber/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.2.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.2.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0.2>4.0.2/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0.2-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-4.0.1>Version 4.0.1/a>/h2>div classdate>January 10, 2019/div>div classentry>p>We are very happy to announce version strong>4.0.1/strong> of Capstone disassembler framework!/p>p>This release fixes some minor bugs of v4.0, as well as introduces some improvements for Python binding. We encourage all users of v4.0 to upgrade./p>p>In no particular order, we would like to thank a hrefhttps://www.nowsecure.com>NowSecure/a>, a hrefhttps://verichains.io>Verichains/a> & a hrefhttps://www.vsec.com.vn/en/>Vsec/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.1.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.1.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0.1>4.0.1/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0.1-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-4.0>Version 4.0/a>/h2>div classdate>December 18, 2018/div>div classentry>p>We are super excited to announce version strong>4.0/strong> of Capstone disassembler framework!/p>p>Exactly 5 years ago, on em>December 18th of 2013/em>, we published our a hrefhttp://www.capstone-engine.org/Version-1.0>first version/a>. Today, this release 4.0 marks em>5 years/em> of the project! Such a long journey, which is impossible without huge community support!/p>p>In no particular order, we would like to thank a hrefhttps://canary.tools>Thinkst Canary/a>, a hrefhttps://www.nowsecure.com>NowSecure/a>, a hrefhttps://e-cq.net>ECQ/a>, a hrefhttps://senrio.com>Senrio/a>, a hrefhttps://gracefulbits.com/>GracefulBits/a> & a hrefhttps://catenacyber.fr>Catena Cyber/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>This version improves a lot of things over v3.0.5. The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0>4.0/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-3.0.5>Version 3.0.5/a>/h2>div classdate>July 18, 2018/div>div classentry>p>We are very happy to announce version strong>3.0.5/strong> of Capstone disassembler framework!/p>p>In no particular order, we would like to thank a hrefhttps://www.crowdstrike.com/>CrowdStrike/a>, a hrefhttps://www6.cmcinfosec.com>CMC Infosec/a> & a hrefhttps://twitter.com/skier_t>Jurriaan Bremer/a> for sponsoring this version!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>project contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone project!/p>p>This version fixes some em>important security issues/em> of v3.0.4, as well as many improvements in the core & bindings. The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/3.0.5.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/3.0.5.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/3.0.5>3.0.5/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-3.0.5-changelog>here/a> for summary of the important changes of this version 3.0.5./p>/div>/article>article classpost>h2>a href/Version-3.0.5-RC2>Version 3.0.5-rc2/a>/h2>div classdate>March 2, 2017/div>div classentry>p>We are excited to announce version strong>3.0.5-RC2/strong> of Capstone disassembler framework!/p>p>This release candidate fixes some em>important security issues/em> of v3.0.4, as well significantly improve the core & bindings. We plan to release the official version 3.0.5 after some more tests./p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/3.0.5-rc2.zip>zip/a> and a hrefhttps://github.com/aquynh/capstone/archive/3.0.5-rc2.tar.gz>tar.gz/a> formats, or at tagname a hrefhttps://github.com/aquynh/capstone/releases/tag/3.0.5-rc2>3.0.5-rc2/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefhttp://capstone-engine.org/download.html>Download section/a>./p>p>For any issues, please feed back via our a hrefcontact.html>contact/a>./p>p>Summary of the important changes of version 3.0.5-rc2./p>h4 idlibrary>Library/h4>ul> li>Fix build for Visual Studio 2012/li> li>Fix X86_REL_ADDR macro/li> li>Add CS_VERSION_MAJOR, CS_VERSION_MINOR, CS_VERSION_EXTRA/li> li>Better support for embedding Capstone into Windows kernel drivers/li> li>Support to embedded Capstone into MacOS kernel/li> li>Support MacOS 10.11 and up/li> li>Better support for Cygwin/li> li>Support build packages for FreeBSD & DragonflyBSD/li> li>Add a command-line tool “cstool”/li> li>Properly handle switching to Endian mode at run-time for Arm, Arm64, Mips & Sparc/li>/ul>h4 idx86>X86/h4>ul> li>Some random 16-bit code can be handled wrongly./li> li>Remove abundant operand type X86_OP_FP/li> li>Fix instructions MOVQ, LOOP, LOOPE, LOOPNE, CALL/JMP rel16, REPNE LODSD, MOV *AX, MOFFS, FAR JMP/CALL/li> li>Add X86_REG_EFLAGS for STC and STD/li> li>Fix instruction attributes for SYSEXIT, MOVW, ROL, LGS, SLDT/li> li>Rename registers ST0-ST7 to be consistent with asm output/li>/ul>h4 idarm>Arm/h4>ul> li>Properly handle IT instruction/li> li>Fix LDRSB/li> li>Fix writeback for LDR/li> li>Fix Thumb BigEndian setup/li>/ul>h4 idarm-1>Arm/h4>ul> li>Fix arith extender/li> li>Fix writeback for LDR/li> li>Rename enum arm64_mrs_reg to arm64_sysreg/li>/ul>h4 idpowerpc>PowerPC/h4>ul> li>Print 0 offset for memory operand/li>/ul>h4 idsparc>Sparc/h4>ul> li>Fix POPC instruction/li>/ul>h4 idpython-binding>Python binding/h4>ul> li>Better PyPy support/li> li>Add __version__/li> li>Better support for Python 3/li> li>Fix CS_SKIPDATA_CALLBACK prototype/li> li>Cast skipdata function inside binding to simplify the API/li>/ul>h4 idjava-binding>Java binding/h4>ul> li>Better handle input with invalid code/li>/ul>h4 idpowershell-binding>PowerShell binding/h4>ul> li>New binding/li>/ul>/div>/article>article classpost>h2>a href/logo>New logo/a>/h2>div classdate>January 20, 2016/div>div classentry>p>We are very excited to announce a a href/img/capstone.png>new logo/a> for Capstone engine! This shiny logo better reflects the spirit of our project, and is more suitable for Tshirts, stickers, mugs etc./p>center>img src/img/capstone.png width160 height160 />/center>p>We would like to thank a hrefhttp://www.xipiter.com>Xipiter/a> for sponsoring the redesign of our new logo! The a href/donate.html>generous & continuous supports/a> from community like this is the main reason why we keep putting significant time and effort maintaining & developing Capstone!/p>p>At the same time, we redesigned the website, so it is more friendly with mobile devices (such as smartphones & tablets). Let us know if you find any broken links./p>/div>/article>article classpost>h2>a href/Donation>Donation/a>/h2>div classdate>July 29, 2015/div>div classentry>p>Are you already using Capstone engine? Yes, if you are using any products in our a hrefshowcase.html>showcase/a>./p>p>Please consider donating to help us improve Capstone!/p>p>You can either donate via em>Paypal/em> or send us em>Bitcoins/em>./p>ul> li> p>Paypal email: font colorblue>capstone.engine@gmail.com/font>/p> /li> li> p>Bitcoin: font color#E65C00>1fGz2GYSjiJxUoACpsHXcGmaAhbEDTuWi/font> (a hrefbitcoin:1fGz2GYSjiJxUoACpsHXcGmaAhbEDTuWi?messagedonation>link/a>)/p> /li>/ul>p>Please a hrefcontact.html>let us know/a> if you want to be listed as em>Capstone supporter/em> after donating./p>h4 idwhy>Why?/h4>p>Capstone is totally free & developed in our spare time. So far we have never received a single cent from donation or sponsor./p>p>However, we are realizing that to keep up with the increasing demand of community & push Capstone to another level, we need more helps from community./p>p>For this reason, we are now receiving em>donation for Capstone/em>./p>h4 idwhat-for>What for?/h4>p>The donation will be used to promote & improve Capstone. Some priorities are:/p>ul> li> p>Get a em>professional designer/em> to make a em>better logo/em> that Capstone deserves to have./p> /li> li> p>Have the current website redesigned to be more friendly & efficient./p> /li> li> p>Give em>rewards/em> to those who are willing to work on our outstanding works (such as a hrefop_access.html>this/a>),so we can release the next versions faster./p> /li> li> p>Add more features requested by a lot of users, such as supporting new architectures like em>Hexagon/em>./p> /li>/ul>h4 idwhat-to-get-back>What to get back?/h4>p>The donators will:/p>ul> li> p>Get listed in our website as em>Capstone supporter/em> - if you do not want to remain anonymous./p> /li> li> p>For a certain amount of donation (to be decided), we can send you T-shirts/stickers/mugs with em>Capstone logo/em> to show our appreciation./p> /li> li> p>For a certain amount of donation (TBD), we can help to integrate & customize Capstone for your products./p> /li>/ul>p>Thanks for your generous supports! Please a hrefcontact.html>contact us/a> for any questions./p>/div>/article>/div>p>See the a hrefnews.html>news archive/a> for older posts./p> /div> div classwrapper-footer> div classcontainer> footer classfooter> a hrefmailto:capstone.engine@gmail.com>i classsvg-icon email>/i>/a>a hrefhttps://github.com/capstone-engine/capstone>i classsvg-icon github>/i>/a>a hrefhttps://www.twitter.com/capstone_engine>i classsvg-icon twitter>/i>/a> /footer> /div> /div> /body>/html>
Port 443
HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 22452Server: GitHub.comContent-Type: text/html; charsetutf-8Last-Modified: Wed, 05 Jul 2023 16:57:32 GMTAccess-Control-Allow-Origin: *ETag: 64a5a0fc-57b4expires: Sat, 14 Sep 2024 01:25:31 GMTCache-Control: max-age600x-proxy-cache: MISSX-GitHub-Request-Id: 5AA4:1535A:2BD104C:2CE4297:66E4E3B2Accept-Ranges: bytesAge: 0Date: Sat, 14 Sep 2024 01:15:31 GMTVia: 1.1 varnishX-Served-By: cache-bfi-kbfi7400041-BFIX-Cache: MISSX-Cache-Hits: 0X-Timer: S1726276531.228553,VS0,VE73Vary: Accept-EncodingX-Fastly-Request-ID: e74c54c896fcb3eb20a2d86761eb4664ffc484fe !DOCTYPE html>html> head> title>The Ultimate Disassembly Framework – Capstone – The Ultimate Disassembler/title> meta charsetutf-8 /> meta contenttext/html; charsetutf-8 http-equivContent-Type> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0> meta namedescription contentThe Ultimate Disassembler> meta propertyog:description contentThe Ultimate Disassembler /> meta nameauthor contentCapstone /> meta propertyog:title contentThe Ultimate Disassembly Framework /> meta propertytwitter:title contentThe Ultimate Disassembly Framework /> link relicon typeimage/png sizes16x16 href/16x16.png> link relicon typeimage/png sizes24x24 href/24x24.png> link relicon typeimage/png sizes32x32 href/32x32.png> link relicon typeimage/png sizes48x48 href/48x48.png> link relicon typeimage/png sizes64x64 href/64x64.png> link relicon typeimage/png sizes96x96 href/96x96.png> link relicon typeimage/png sizes128x128 href/128x128.png> link relicon typeimage/png sizes256x256 href/256x256.png> link relicon typeimage/png sizes512x512 href/512x512.png> link relmanifest href/manifest.json> meta namemsapplication-TileColor content#ffffff> meta namemsapplication-TileImage content/ms-icon-144x144.png> meta nametheme-color content#ffffff> !--if lt IE 9> script srchttp://html5shiv.googlecode.com/svn/trunk/html5.js>/script> !endif--> link relstylesheet typetext/css href/style.css /> link relalternate typeapplication/rss+xml titleCapstone - The Ultimate Disassembler href/feed.xml /> !-- Created with Jekyll Now - http://github.com/barryclark/jekyll-now --> /head> body> div classwrapper-footer> div classcontainer> footer classsponsor> div alignright>a hrefhttps://www.vsec.com.vn/en/>img border0 titleRelease sponsor src/img/vsec.png height35>/a>a hrefhttps://verichains.io>img border0 titleRelease sponsor src/img/verichains2.png height35>/a>a hrefhttps://canary.tools>img border0 titleRelease sponsor src/img/thinkst.png height35 stylemargin: 0px 10px>/a>a hrefhttps://www.nowsecure.com>img border0 titleRelease sponsor src/img/nowsecure.png height35>/a>a hrefhttps://senrio.com>img border0 titleRelease sponsor src/img/xipiter.png height35>/a>a hrefhttps://catenacyber.fr>img border0 titleRelease sponsor src/img/catena.png height35>/a>/div> /footer> /div> /div> div classwrapper-masthead> div classcontainer> header classmasthead clearfix> a href/ classsite-avatar>img src/img/capstone.png />/a> div classsite-info> h1 classsite-name>a href/>Capstone/a>/h1> p classsite-description>The Ultimate Disassembler/p> /div> nav> a href/download.html>Download/a> a href/documentation.html>Docs/a> a href/showcase.html>Showcase/a> a href/testimonial.html>Testimonials/a> a href/donate.html>Donate/a> a href/contact.html>Contact/a> /nav> /header> /div> /div> div idmain rolemain classcontainer> h2 idwelcome>Welcome/h2>p>strong>Capstone/strong> is a lightweight multi-platform, multi-architecture disassembly framework./p>p>Our target is to make Capstone the ultimate disassembly engine for binary analysis and reversing in the security community./p>h3 idhighlight-features>Highlight features/h3>ul> li> p>Multi-architectures: em>ARM/em>, em>ARM64/em> (em>ARMv8/em>), em>BPF/em>, em>Ethereum VM/em>, em>M68K/em>, em>M680X/em>, em>Mips/em>, em>MOS65XX/em>, em>PowerPC/em>, em>RISC-V/em>, em>SH/em>, em>Sparc/em>, em>SystemZ/em>, em>TMS320C64X/em>, em>TriCore/em>, em>Webassembly/em>, em>XCore/em> and em>X86/em> (16, 32, 64)./p> /li> li> p>Clean/simple/lightweight/intuitive architecture-neutral API./p> /li> li> p>Provide details on disassembled instruction (called “decomposer” by some others)./p> /li> li> p>Provide some semantics of the disassembled instruction, such as list of implicit registers read & written./p> /li> li> p>Implemented in pure C language, with bindings for em>D/em>, em>Clojure/em>, em>F#/em>, em>Common Lisp/em>, em>Visual Basic/em>, em>PHP/em>, em>PowerShell/em>, em>Haskell/em>, em>Perl/em>, em>Python/em>, em>Ruby/em>, em>C#/em>, em>NodeJS/em>, em>Java/em>, em>GO/em>, em>C++/em>, em>OCaml/em>, em>Lua/em>, em>Rust/em>, em>Delphi/em>, em>Free Pascal/em> & em>Vala/em> available./p> /li> li> p>Native support for em>Windows/em> & *nix (with em>Mac OSX/em>, em>iOS/em>, em>Android/em>, em>Linux/em>, *BSD & em>Solaris/em> confirmed)./p> /li> li> p>Thread-safe by design./p> /li> li> p>Special support for embedding into firmware or OS kernel./p> /li> li> p>High performance & suitable for malware analysis (capable of handling various em>X86/em> malware tricks)./p> /li> li> p>Distributed under the open source em>BSD/em> license./p> /li>/ul>p>br />Some of the reasons making Capstone unique are elaborated a hreffeatures.html>here/a>./p>p>Find in this a href/BHUSA2014-capstone.pdf>Blackhat USA 2014 slides/a> more technical details behind our disassembly engine./p>h3 idtestimonials>Testimonials/h3>blockquote> p>i>“Capstone is something people have wanted for years; the value is apparent in the implementation, and it’s nice to finally have an industry standard for this”./i>– George “Geohot” Hotz./p>/blockquote>blockquote> p>i>“Capstone has changed the Reverse Engineering landscape: We finally have a solid, independent, and free disassembler engine”./i>– Felix “FX” Lindner./p>/blockquote>blockquote> p>i>“Capstone will soon be the standard disassembly engine”./i>– Bruce Dang./p>/blockquote>blockquote> p>i>“Capstone solves a well known issue in the reversing community by a well tested and maintained library for most common architectures using a generic API”./i>– Pancake./p>/blockquote>blockquote> p>i>“And, nowadays, Capstone is the best embeddable disassembler out there”./i>– Joxean Koret./p>/blockquote>blockquote> p>i>“I must have mentioned it at least 25 times today with our client. Not sure yet, but this engine might just be the gold standard”./i>– Stephen Ridley./p>/blockquote>blockquote> p>i>“Developers of Capstone provide great support. Its small size and high modularity makes it perfectly working in kernel as well!”./i>– Peter Hlavaty./p>/blockquote>blockquote> p>i>“Love at first sight! Beautiful API, support latest instructions, Capstone truly is the ultimate disassembly framework!”./i>– Ole André Vadla Ravnås./p>/blockquote>blockquote> p>i>“Simply the best - recommended to anyone asking which disassembler to use!”./i>– Jurriaan Bremer./p>/blockquote>blockquote> p>i>“The most complete disassembler library available for the reverse engineering and information security communities”./i>– Pedro “osxreverser” Vilaça./p>/blockquote>blockquote> p>i>“The API is straightforward and easy to work with, and on the few occasions we have run into issues the Capstone developers have provided bug fixes, new features, and support in a matter of hours”./i>– Sean Heelan./p>/blockquote>blockquote> p>i>“I expect Capstone to become the standard, a stepping stone for all projects everywhere”./i>– Ange Albertini./p>/blockquote>p>See complete testimonials for Capstone a hreftestimonial.html>here/a>./p>hr />div classposts>article classpost>h2>a href/Version-5.0>Version 5.0/a>/h2>div classdate>July 5, 2023/div>div classentry>p>We are very happy to announce version strong>5.0/strong> of Capstone disassembler framework!/p>p>This release fixes a lot of bugs and adds few new architectures. We strongly encourage all users of v4 to upgrade./p>p>We wish to express our sincere gratitude to all a hrefhttps://github.com/capstone-engine/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supported us to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/capstone-engine/capstone/archive/refs/tags/5.0.zip>zip/a> & a hrefhttps://github.com/capstone-engine/capstone/archive/refs/tags/5.0.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/capstone-engine/capstone/releases/tag/5.0>5.0/a> in our Github repo./p>p>We are planning for the next major release, version em>6.0/em>. Stay tuned for updates!/p>/div>/article>article classpost>h2>a href/Version-4.0.2>Version 4.0.2/a>/h2>div classdate>May 8, 2020/div>div classentry>p>We are very happy to announce version strong>4.0.2/strong> of Capstone disassembler framework!/p>p>This release fixes some bugs of v4.0.1, as well as introduces some improvements for several bindings. We strongly encourage all users of v4.0.1 to upgrade./p>p>In no particular order, we would like to thank a hrefhttps://xipiter.com>Xipiter/a> and a hrefhttps://catenacyber.fr>Catena Cyber/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.2.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.2.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0.2>4.0.2/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0.2-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-4.0.1>Version 4.0.1/a>/h2>div classdate>January 10, 2019/div>div classentry>p>We are very happy to announce version strong>4.0.1/strong> of Capstone disassembler framework!/p>p>This release fixes some minor bugs of v4.0, as well as introduces some improvements for Python binding. We encourage all users of v4.0 to upgrade./p>p>In no particular order, we would like to thank a hrefhttps://www.nowsecure.com>NowSecure/a>, a hrefhttps://verichains.io>Verichains/a> & a hrefhttps://www.vsec.com.vn/en/>Vsec/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.1.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.1.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0.1>4.0.1/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0.1-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-4.0>Version 4.0/a>/h2>div classdate>December 18, 2018/div>div classentry>p>We are super excited to announce version strong>4.0/strong> of Capstone disassembler framework!/p>p>Exactly 5 years ago, on em>December 18th of 2013/em>, we published our a hrefhttp://www.capstone-engine.org/Version-1.0>first version/a>. Today, this release 4.0 marks em>5 years/em> of the project! Such a long journey, which is impossible without huge community support!/p>p>In no particular order, we would like to thank a hrefhttps://canary.tools>Thinkst Canary/a>, a hrefhttps://www.nowsecure.com>NowSecure/a>, a hrefhttps://e-cq.net>ECQ/a>, a hrefhttps://senrio.com>Senrio/a>, a hrefhttps://gracefulbits.com/>GracefulBits/a> & a hrefhttps://catenacyber.fr>Catena Cyber/a> for sponsoring this release!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone!/p>p>This version improves a lot of things over v3.0.5. The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/4.0.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/4.0.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/4.0>4.0/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-4.0-changelog>here/a> for summary of the important changes of this version./p>/div>/article>article classpost>h2>a href/Version-3.0.5>Version 3.0.5/a>/h2>div classdate>July 18, 2018/div>div classentry>p>We are very happy to announce version strong>3.0.5/strong> of Capstone disassembler framework!/p>p>In no particular order, we would like to thank a hrefhttps://www.crowdstrike.com/>CrowdStrike/a>, a hrefhttps://www6.cmcinfosec.com>CMC Infosec/a> & a hrefhttps://twitter.com/skier_t>Jurriaan Bremer/a> for sponsoring this version!/p>p>We also wish to express our sincere gratitude to all a hrefhttps://github.com/aquynh/capstone/graphs/contributors>project contributors/a> & a hrefdonate>donators/a>, who generously supportedus to maintain Capstone project!/p>p>This version fixes some em>important security issues/em> of v3.0.4, as well as many improvements in the core & bindings. The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/3.0.5.zip>zip/a> & a hrefhttps://github.com/aquynh/capstone/archive/3.0.5.tar.gz>tar.gz/a> formats, or at tag-name a hrefhttps://github.com/aquynh/capstone/releases/tag/3.0.5>3.0.5/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefdownload.html>Download section/a>./p>p>See a hrefVersion-3.0.5-changelog>here/a> for summary of the important changes of this version 3.0.5./p>/div>/article>article classpost>h2>a href/Version-3.0.5-RC2>Version 3.0.5-rc2/a>/h2>div classdate>March 2, 2017/div>div classentry>p>We are excited to announce version strong>3.0.5-RC2/strong> of Capstone disassembler framework!/p>p>This release candidate fixes some em>important security issues/em> of v3.0.4, as well significantly improve the core & bindings. We plan to release the official version 3.0.5 after some more tests./p>p>The source code is available in a hrefhttps://github.com/aquynh/capstone/archive/3.0.5-rc2.zip>zip/a> and a hrefhttps://github.com/aquynh/capstone/archive/3.0.5-rc2.tar.gz>tar.gz/a> formats, or at tagname a hrefhttps://github.com/aquynh/capstone/releases/tag/3.0.5-rc2>3.0.5-rc2/a> in our Github repo./p>p>Find pre-compiled binaries in the a hrefhttp://capstone-engine.org/download.html>Download section/a>./p>p>For any issues, please feed back via our a hrefcontact.html>contact/a>./p>p>Summary of the important changes of version 3.0.5-rc2./p>h4 idlibrary>Library/h4>ul> li>Fix build for Visual Studio 2012/li> li>Fix X86_REL_ADDR macro/li> li>Add CS_VERSION_MAJOR, CS_VERSION_MINOR, CS_VERSION_EXTRA/li> li>Better support for embedding Capstone into Windows kernel drivers/li> li>Support to embedded Capstone into MacOS kernel/li> li>Support MacOS 10.11 and up/li> li>Better support for Cygwin/li> li>Support build packages for FreeBSD & DragonflyBSD/li> li>Add a command-line tool “cstool”/li> li>Properly handle switching to Endian mode at run-time for Arm, Arm64, Mips & Sparc/li>/ul>h4 idx86>X86/h4>ul> li>Some random 16-bit code can be handled wrongly./li> li>Remove abundant operand type X86_OP_FP/li> li>Fix instructions MOVQ, LOOP, LOOPE, LOOPNE, CALL/JMP rel16, REPNE LODSD, MOV *AX, MOFFS, FAR JMP/CALL/li> li>Add X86_REG_EFLAGS for STC and STD/li> li>Fix instruction attributes for SYSEXIT, MOVW, ROL, LGS, SLDT/li> li>Rename registers ST0-ST7 to be consistent with asm output/li>/ul>h4 idarm>Arm/h4>ul> li>Properly handle IT instruction/li> li>Fix LDRSB/li> li>Fix writeback for LDR/li> li>Fix Thumb BigEndian setup/li>/ul>h4 idarm-1>Arm/h4>ul> li>Fix arith extender/li> li>Fix writeback for LDR/li> li>Rename enum arm64_mrs_reg to arm64_sysreg/li>/ul>h4 idpowerpc>PowerPC/h4>ul> li>Print 0 offset for memory operand/li>/ul>h4 idsparc>Sparc/h4>ul> li>Fix POPC instruction/li>/ul>h4 idpython-binding>Python binding/h4>ul> li>Better PyPy support/li> li>Add __version__/li> li>Better support for Python 3/li> li>Fix CS_SKIPDATA_CALLBACK prototype/li> li>Cast skipdata function inside binding to simplify the API/li>/ul>h4 idjava-binding>Java binding/h4>ul> li>Better handle input with invalid code/li>/ul>h4 idpowershell-binding>PowerShell binding/h4>ul> li>New binding/li>/ul>/div>/article>article classpost>h2>a href/logo>New logo/a>/h2>div classdate>January 20, 2016/div>div classentry>p>We are very excited to announce a a href/img/capstone.png>new logo/a> for Capstone engine! This shiny logo better reflects the spirit of our project, and is more suitable for Tshirts, stickers, mugs etc./p>center>img src/img/capstone.png width160 height160 />/center>p>We would like to thank a hrefhttp://www.xipiter.com>Xipiter/a> for sponsoring the redesign of our new logo! The a href/donate.html>generous & continuous supports/a> from community like this is the main reason why we keep putting significant time and effort maintaining & developing Capstone!/p>p>At the same time, we redesigned the website, so it is more friendly with mobile devices (such as smartphones & tablets). Let us know if you find any broken links./p>/div>/article>article classpost>h2>a href/Donation>Donation/a>/h2>div classdate>July 29, 2015/div>div classentry>p>Are you already using Capstone engine? Yes, if you are using any products in our a hrefshowcase.html>showcase/a>./p>p>Please consider donating to help us improve Capstone!/p>p>You can either donate via em>Paypal/em> or send us em>Bitcoins/em>./p>ul> li> p>Paypal email: font colorblue>capstone.engine@gmail.com/font>/p> /li> li> p>Bitcoin: font color#E65C00>1fGz2GYSjiJxUoACpsHXcGmaAhbEDTuWi/font> (a hrefbitcoin:1fGz2GYSjiJxUoACpsHXcGmaAhbEDTuWi?messagedonation>link/a>)/p> /li>/ul>p>Please a hrefcontact.html>let us know/a> if you want to be listed as em>Capstone supporter/em> after donating./p>h4 idwhy>Why?/h4>p>Capstone is totally free & developed in our spare time. So far we have never received a single cent from donation or sponsor./p>p>However, we are realizing that to keep up with the increasing demand of community & push Capstone to another level, we need more helps from community./p>p>For this reason, we are now receiving em>donation for Capstone/em>./p>h4 idwhat-for>What for?/h4>p>The donation will be used to promote & improve Capstone. Some priorities are:/p>ul> li> p>Get a em>professional designer/em> to make a em>better logo/em> that Capstone deserves to have./p> /li> li> p>Have the current website redesigned to be more friendly & efficient./p> /li> li> p>Give em>rewards/em> to those who are willing to work on our outstanding works (such as a hrefop_access.html>this/a>),so we can release the next versions faster./p> /li> li> p>Add more features requested by a lot of users, such as supporting new architectures like em>Hexagon/em>./p> /li>/ul>h4 idwhat-to-get-back>What to get back?/h4>p>The donators will:/p>ul> li> p>Get listed in our website as em>Capstone supporter/em> - if you do not want to remain anonymous./p> /li> li> p>For a certain amount of donation (to be decided), we can send you T-shirts/stickers/mugs with em>Capstone logo/em> to show our appreciation./p> /li> li> p>For a certain amount of donation (TBD), we can help to integrate & customize Capstone for your products./p> /li>/ul>p>Thanks for your generous supports! Please a hrefcontact.html>contact us/a> for any questions./p>/div>/article>/div>p>See the a hrefnews.html>news archive/a> for older posts./p> /div> div classwrapper-footer> div classcontainer> footer classfooter> a hrefmailto:capstone.engine@gmail.com>i classsvg-icon email>/i>/a>a hrefhttps://github.com/capstone-engine/capstone>i classsvg-icon github>/i>/a>a hrefhttps://www.twitter.com/capstone_engine>i classsvg-icon twitter>/i>/a> /footer> /div> /div> /body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]