Capstone — multi-architecture disassembly library
Capstone (capstone-engine/capstone) is a widely embedded disassembly library covering many CPU architectures. Release 5.0.9 (2026-05-28 UTC) is the latest non-alpha-tagged release checked on 2026-10-24 (a 6.0.0-Alpha line also exists). License text is BSD-style in LICENSE.TXT.
Snapshot
| Field | Value |
|---|---|
| License | BSD-style (LICENSE.TXT) |
| Latest checked | 5.0.9 (2026-05-28 UTC); 6.0 alphas also published |
| Job | Multi-arch disassembly engine / library |
| Stars (order of magnitude) | ~9.1k on GitHub (counts change daily) |
| Typical next step | Pair with a debugger, emulator or your own Python/C bindings |
When Capstone fits
- You are writing a tool that needs portable disassembly.
- An existing open-source project already links Capstone and you are extending it under authorization.
- You need a lighter dependency than shipping a full Ghidra headless stack.
When to prefer something else
| Need | Prefer |
|---|---|
| Interactive decompiler GUI | Ghidra / Cutter |
| Fast x86/x64-focused library | Zydis |
| Full CLI RE framework | radare2 / Rizin |
Legal note
Capstone does not grant permission to reverse third-party software. Only analyze binaries you own or may examine.
- Use Capstone as a library, not as a beginner GUI.
- Prefer citing 5.0.9 unless you intentionally track the 6.0 alpha line.
- Keep authorized-use framing in any wrapper you ship.
For legal, authorized and educational use only.
FAQ
What is Capstone?
Capstone is a multi-architecture disassembly framework used as a library inside debuggers, emulators and custom RE scripts — it is not a full GUI suite like Ghidra.
Which version is cited?
5.0.9 published 2026-05-28 UTC (latest non-alpha-tagged release checked 2026-10-24). Alpha tags such as 6.0.0-Alpha11 exist; this page cites the 5.0.x stable line.
What license applies?
Upstream ships a BSD-style LICENSE.TXT (3-clause style). GitHub may show NOASSERTION for SPDX — read LICENSE.TXT before redistribution.
Should beginners start here instead of Ghidra?
Usually no. Start with a full suite (Ghidra, Cutter); reach for Capstone when embedding disassembly in your own tools.
Does Capstone execute binaries?
No. It decodes machine code you supply. Execution/emulation is out of scope for Capstone itself.