TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Capstone Disassembler Framework

103 pointsby xvilka8 months ago

9 comments

woodruffw8 months ago
Capstone supports an impressive breadth of architectures. However, if all you need is x86&#x2F;AMD64 decoding and disassembly, there are much higher quality (in terms of accurate decoding) libraries out there.<p>I wrote a differential fuzzer for x86 decoders a few years ago, and XED and Zydis generally performed far better (in terms of accuracy) than Capstone[1]. And on the Rust side, yaxpeax and iced-x86 perform very admirably.<p>[1]: <a href="https:&#x2F;&#x2F;blog.trailofbits.com&#x2F;2019&#x2F;10&#x2F;31&#x2F;destroying-x86_64-instruction-decoders-with-differential-fuzzing&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.trailofbits.com&#x2F;2019&#x2F;10&#x2F;31&#x2F;destroying-x86_64-in...</a>
评论 #41653312 未加载
评论 #41653303 未加载
评论 #41650790 未加载
jstrieb8 months ago
Capstone is very useful!<p>Someone (not me) has also cross-compiled Capstone to WebAssembly so it can be used in client-side browser applications.<p><a href="https:&#x2F;&#x2F;alexaltea.github.io&#x2F;capstone.js&#x2F;" rel="nofollow">https:&#x2F;&#x2F;alexaltea.github.io&#x2F;capstone.js&#x2F;</a><p>I&#x27;ve used this in a couple of projects to support disassembly in static web apps with no back end.
smolsky8 months ago
It&#x27;s difficult to find a succinct overview. Here is a slide deck buried among links: <a href="http:&#x2F;&#x2F;www.capstone-engine.org&#x2F;BHUSA2014-capstone.pdf" rel="nofollow">http:&#x2F;&#x2F;www.capstone-engine.org&#x2F;BHUSA2014-capstone.pdf</a>
评论 #41650828 未加载
__alexander8 months ago
If you find Capstone interesting, check out the Unicorn Engine.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;unicorn-engine&#x2F;unicorn">https:&#x2F;&#x2F;github.com&#x2F;unicorn-engine&#x2F;unicorn</a><p>Also, if anyone is interested in an example of using capstone for basic disassembly and analysis, here is a link to my capstool project.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;alexander-hanel&#x2F;capstool">https:&#x2F;&#x2F;github.com&#x2F;alexander-hanel&#x2F;capstool</a>
评论 #41655148 未加载
评论 #41656983 未加载
post-factum8 months ago
It is also used in one of the Linux kernel debuggers: <a href="https:&#x2F;&#x2F;codeberg.org&#x2F;pf-kernel&#x2F;crush" rel="nofollow">https:&#x2F;&#x2F;codeberg.org&#x2F;pf-kernel&#x2F;crush</a>
评论 #41649170 未加载
nicolodev8 months ago
Another good replacement for capstone&#x2F;keystone based on LLVM is nyxstone <a href="https:&#x2F;&#x2F;github.com&#x2F;emproof-com&#x2F;nyxstone">https:&#x2F;&#x2F;github.com&#x2F;emproof-com&#x2F;nyxstone</a>
评论 #41653344 未加载
评论 #41650977 未加载
评论 #41654042 未加载
Cieric8 months ago
Haven&#x27;t had a chance to use capstone yet, but a project I really like happens to use it.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;xoreaxeaxeax&#x2F;sandsifter">https:&#x2F;&#x2F;github.com&#x2F;xoreaxeaxeax&#x2F;sandsifter</a>
deoxykev8 months ago
Imhex is a really great frontend for Capstone. <a href="https:&#x2F;&#x2F;github.com&#x2F;WerWolv&#x2F;ImHex">https:&#x2F;&#x2F;github.com&#x2F;WerWolv&#x2F;ImHex</a>
stonethrowaway8 months ago
I think it’s incredible this is implemented in C. Well done!
评论 #41649228 未加载