# capstone mit Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, apt, scoop installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für capstone in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:capstone
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install capstone
```

  Evidenz: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install capstone
```

  Evidenz: MacPorts ports tree: devel/capstone/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add capstone
```

  Evidenz: Alpine Linux edge package indexes: capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install capstone
```

  Evidenz: Fedora Rawhide package metadata: capstone from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#capstone
```

  Evidenz: nixpkgs package indexes: pkgs/by-name/ca/capstone/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S capstone
```

  Evidenz: Arch Linux sync databases: capstone from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install capstone
```

  Evidenz: openSUSE Tumbleweed package metadata: capstone from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

- Debian apt (92%):

```sh
sudo apt install capstone-tool
```

  Evidenz: Debian stable package indexes: capstone-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

### Windows

- Scoop (92%):

```sh
scoop install main/capstone
```

  Evidenz: Scoop official bucket manifest trees: bucket/capstone.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Paketfakten

- **Paketschlüssel:** brew:capstone
- **Paketmanager:** Homebrew
- **Version:** 5.0.9
- **Quellzusammenfassung:** Multi-platform, multi-architecture disassembly framework
- **Homepage:** <https://www.capstone-engine.org/>
- **Repository:** <https://github.com/capstone-engine/capstone>
- **Zuletzt aktualisiert:** 2026-05-28T18:49:05Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- cstool (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 5.0.9
## Projektgeschichte und Nutzung

Capstone is a lightweight, multi-platform, multi-architecture disassembly framework used in binary analysis, malware analysis, reverse engineering, and security tooling.

### Projektgeschichte

The official README says Capstone was created by Nguyen Anh Quynh and then developed and maintained by a small community. Its goal is to be an architecture-neutral disassembly engine for binary analysis and reversing in the security community.

Capstone's official site emphasizes a pure-C core, a simple API, detailed instruction decomposition, implicit register semantics, thread safety, embedding support for firmware or kernels, and native support across Windows, macOS, iOS, Android, Linux, BSD, Solaris, and other Unix-like systems.

The project appeared publicly on GitHub in 2013 and was presented in technical form at Black Hat USA 2014. By 2026 the official download page listed 6.0.0-Alpha9 as the current version, while GitHub releases showed active 5.x maintenance and 6.x alpha development.

### Adoptionsgeschichte

Capstone became widely adopted because reverse-engineering tools needed a reusable disassembler library rather than every project owning architecture-specific decode code. The official site collects testimonials from reverse engineers and tool authors calling it a standard or gold standard disassembly engine.

The official documentation documents repository installation across Homebrew, MacPorts, Debian, Ubuntu, FreeBSD, OpenBSD, NetBSD, and Python packaging. The batch package metadata adds Alpine, Fedora, Nix, Arch, Scoop, and openSUSE, which reflects broad cross-platform packaging.

### Wie es verwendet wird

Developers embed Capstone as a library to disassemble bytes for many CPU architectures and retrieve instruction details. The Homebrew package also provides cstool, a command-line utility for quick disassembly tasks.

Capstone is used in reverse-engineering frameworks, malware-analysis tools, debuggers, firmware analysis, exploit research, and educational tooling. Bindings listed by the official site and README cover many languages, making the C engine available beyond C and C++ applications.

### Warum Paket-Nerds sich dafür interessieren

Capstone is package-nerd significant because it is a foundational native library with many downstream language bindings. A system package can satisfy C/C++ consumers, Python users, command-line users, and reverse-engineering tools that dynamically link against the same engine.

It also illustrates a common packaging headache: a security-oriented C library with fast-moving architecture support, multiple major branches, Python wheels, bindings outside the main tree, and tools that expect the CLI, headers, and shared library to line up.

### Zeitleiste

- 2013: capstone-engine/capstone repository is created on GitHub.
- 2014: Capstone technical details are presented in Black Hat USA slides linked from the official site.
- 2015: Official docs record Capstone availability in several Unix package repositories.
- 2025: Capstone 6.0.0 alpha releases begin appearing in the GitHub release feed.
- 2026-05-29: Official download page lists Capstone 6.0.0-Alpha9 as the current release.

### Related projects

- Keystone is a related assembler framework from the same authorial ecosystem, often paired conceptually with Capstone for assembly and disassembly workflows.
- Unicorn is a related CPU emulator framework commonly used with Capstone in binary-analysis stacks.
- Rizin and radare2 are reverse-engineering frameworks in Capstone's wider ecosystem; Rizin is also shown as a release sponsor on the official site.
- Language bindings such as capstone-rs, Node-Capstone, LuaCapstone, Capstone.NET, and Java bindings are listed by the official download page.

### Quellen

- <https://api.github.com/repos/capstone-engine/capstone/releases>
- <https://github.com/capstone-engine/capstone>
- <https://github.com/capstone-engine/capstone/blob/next/README.md>
- <https://www.capstone-engine.org/>
- <https://www.capstone-engine.org/documentation.html>
- <https://www.capstone-engine.org/download.html>
- input.json source_facts.package-manager


## Sicherheitshinweise

narrow executable package without higher-risk signals.

- **Geiger-Risiko:** grün / niedrig
- narrow executable package without higher-risk signals

## Andere Paketmanager-Einträge

- Debian apt - capstone-tool - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: capstone-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - command line tool | https://www.capstone-engine.org/
- Debian apt - libcapstone-dev - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: libcapstone-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - devel files | https://www.capstone-engine.org/
- Debian apt - libcapstone5 - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: libcapstone5 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - library | https://www.capstone-engine.org/
- Debian apt - python3-capstone - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: python3-capstone from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - Python bindings | https://www.capstone-engine.org/
- Nix - capstone: normalized package name match | nixpkgs package indexes: pkgs/by-name/ca/capstone/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - capstone-tool - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: capstone-tool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - command line tool | https://www.capstone-engine.org/
- Ubuntu apt - libcapstone-dev - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libcapstone-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - devel files | https://www.capstone-engine.org/
- Ubuntu apt - libcapstone4 - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libcapstone4 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - library | https://www.capstone-engine.org/
- Ubuntu apt - python3-capstone - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-capstone from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - Python bindings | https://www.capstone-engine.org/
- apk - capstone - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler | https://www.capstone-engine.org
- apk - capstone-dev - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (development files) | https://www.capstone-engine.org
- apk - capstone-static - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (static library) | https://www.capstone-engine.org
- apk - cstool - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: cstool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | cstool for capstone disassembler | https://www.capstone-engine.org
- apk - py3-capstone - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: py3-capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (for python3) | https://www.capstone-engine.org
- apk - py3-capstone-pyc - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: py3-capstone-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Precompiled Python bytecode for py3-capstone | https://www.capstone-engine.org
- dnf - capstone - 5.0.6-6.fc45: normalized package name match | Fedora Rawhide package metadata: capstone from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A lightweight multi-platform, multi-architecture disassembly framework | http://www.capstone-engine.org/


## Combined YAML source

View the package source record on GitHub. [combined/capstone.yml](https://github.com/mxcl/pkgdb/blob/main/combined/capstone.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph