# 使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, zypper, apt, scoop 安装 capstone

查看 capstone 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:capstone
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install capstone
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install capstone
```

  证据: MacPorts ports tree: devel/capstone/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add capstone
```

  证据: Alpine Linux edge package indexes: capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install capstone
```

  证据: Fedora Rawhide package metadata: capstone from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#capstone
```

  证据: nixpkgs package indexes: pkgs/by-name/ca/capstone/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S capstone
```

  证据: Arch Linux sync databases: capstone from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install capstone
```

  证据: openSUSE Tumbleweed package metadata: capstone from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

- Debian apt (92%):

```sh
sudo apt install capstone-tool
```

  证据: Debian stable package indexes: capstone-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

### Windows

- Scoop (92%):

```sh
scoop install main/capstone
```

  证据: Scoop official bucket manifest trees: bucket/capstone.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:capstone
- **软件包管理器:** Homebrew
- **版本:** 5.0.9
- **来源摘要:** Multi-platform, multi-architecture disassembly framework
- **主页:** <https://www.capstone-engine.org/>
- **仓库:** <https://github.com/capstone-engine/capstone>
- **最后更新:** 2026-05-28T18:49:05Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- cstool (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 5.0.9
## 项目历史与用法

Capstone is a lightweight, multi-platform, multi-architecture disassembly framework used in binary analysis, malware analysis, reverse engineering, and security tooling.

### 项目历史

The official README says Capstone was created by Nguyen Anh Quynh and then developed and maintained by a small community. Its goal is to be an architecture-neutral disassembly engine for binary analysis and reversing in the security community.

Capstone's official site emphasizes a pure-C core, a simple API, detailed instruction decomposition, implicit register semantics, thread safety, embedding support for firmware or kernels, and native support across Windows, macOS, iOS, Android, Linux, BSD, Solaris, and other Unix-like systems.

The project appeared publicly on GitHub in 2013 and was presented in technical form at Black Hat USA 2014. By 2026 the official download page listed 6.0.0-Alpha9 as the current version, while GitHub releases showed active 5.x maintenance and 6.x alpha development.

### 采用历史

Capstone became widely adopted because reverse-engineering tools needed a reusable disassembler library rather than every project owning architecture-specific decode code. The official site collects testimonials from reverse engineers and tool authors calling it a standard or gold standard disassembly engine.

The official documentation documents repository installation across Homebrew, MacPorts, Debian, Ubuntu, FreeBSD, OpenBSD, NetBSD, and Python packaging. The batch package metadata adds Alpine, Fedora, Nix, Arch, Scoop, and openSUSE, which reflects broad cross-platform packaging.

### 使用方式

Developers embed Capstone as a library to disassemble bytes for many CPU architectures and retrieve instruction details. The Homebrew package also provides cstool, a command-line utility for quick disassembly tasks.

Capstone is used in reverse-engineering frameworks, malware-analysis tools, debuggers, firmware analysis, exploit research, and educational tooling. Bindings listed by the official site and README cover many languages, making the C engine available beyond C and C++ applications.

### 为什么软件包爱好者会关心

Capstone is package-nerd significant because it is a foundational native library with many downstream language bindings. A system package can satisfy C/C++ consumers, Python users, command-line users, and reverse-engineering tools that dynamically link against the same engine.

It also illustrates a common packaging headache: a security-oriented C library with fast-moving architecture support, multiple major branches, Python wheels, bindings outside the main tree, and tools that expect the CLI, headers, and shared library to line up.

### 时间线

- 2013: capstone-engine/capstone repository is created on GitHub.
- 2014: Capstone technical details are presented in Black Hat USA slides linked from the official site.
- 2015: Official docs record Capstone availability in several Unix package repositories.
- 2025: Capstone 6.0.0 alpha releases begin appearing in the GitHub release feed.
- 2026-05-29: Official download page lists Capstone 6.0.0-Alpha9 as the current release.

### Related projects

- Keystone is a related assembler framework from the same authorial ecosystem, often paired conceptually with Capstone for assembly and disassembly workflows.
- Unicorn is a related CPU emulator framework commonly used with Capstone in binary-analysis stacks.
- Rizin and radare2 are reverse-engineering frameworks in Capstone's wider ecosystem; Rizin is also shown as a release sponsor on the official site.
- Language bindings such as capstone-rs, Node-Capstone, LuaCapstone, Capstone.NET, and Java bindings are listed by the official download page.

### 来源

- <https://api.github.com/repos/capstone-engine/capstone/releases>
- <https://github.com/capstone-engine/capstone>
- <https://github.com/capstone-engine/capstone/blob/next/README.md>
- <https://www.capstone-engine.org/>
- <https://www.capstone-engine.org/documentation.html>
- <https://www.capstone-engine.org/download.html>
- input.json source_facts.package-manager


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals

## 其他软件包管理器记录

- Debian apt - capstone-tool - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: capstone-tool from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - command line tool | https://www.capstone-engine.org/
- Debian apt - libcapstone-dev - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: libcapstone-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - devel files | https://www.capstone-engine.org/
- Debian apt - libcapstone5 - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: libcapstone5 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - library | https://www.capstone-engine.org/
- Debian apt - python3-capstone - 5.0.7-1~deb13u1: normalized package name match | Debian stable package indexes: python3-capstone from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | lightweight multi-architecture disassembly framework - Python bindings | https://www.capstone-engine.org/
- Nix - capstone: normalized package name match | nixpkgs package indexes: pkgs/by-name/ca/capstone/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - capstone-tool - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: capstone-tool from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - command line tool | https://www.capstone-engine.org/
- Ubuntu apt - libcapstone-dev - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libcapstone-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - devel files | https://www.capstone-engine.org/
- Ubuntu apt - libcapstone4 - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libcapstone4 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - library | https://www.capstone-engine.org/
- Ubuntu apt - python3-capstone - 4.0.2-5.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-capstone from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | lightweight multi-architecture disassembly framework - Python bindings | https://www.capstone-engine.org/
- apk - capstone - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler | https://www.capstone-engine.org
- apk - capstone-dev - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (development files) | https://www.capstone-engine.org
- apk - capstone-static - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: capstone-static from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (static library) | https://www.capstone-engine.org
- apk - cstool - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: cstool from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | cstool for capstone disassembler | https://www.capstone-engine.org
- apk - py3-capstone - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: py3-capstone from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | The Ultimate Disassembler (for python3) | https://www.capstone-engine.org
- apk - py3-capstone-pyc - 5.0.9-r0: normalized package name match | Alpine Linux edge package indexes: py3-capstone-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Precompiled Python bytecode for py3-capstone | https://www.capstone-engine.org
- dnf - capstone - 5.0.6-6.fc45: normalized package name match | Fedora Rawhide package metadata: capstone from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A lightweight multi-platform, multi-architecture disassembly framework | http://www.capstone-engine.org/


## Combined YAML source

View the package source record on GitHub. [combined/capstone.yml](https://github.com/mxcl/pkgdb/blob/main/combined/capstone.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph