Capstone is a disassembly framework with support for multiple hardware architectures like ARM, X86, MIPS, and more. It offers a clean and lightweight API, provides details on disassembled instructions, and is implemented in pure C with bindings for various languages. It has native support for popular platforms like Windows, Mac OSX, Linux, and more.
FEATURES
SIMILAR TOOLS
Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.
A static analysis tool for PE files that identifies potential malicious indicators through compiler detection, packing analysis, signature matching, and suspicious string identification.
A tool that extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
An open source machine code decompiler that converts binary executables into readable C source code across multiple architectures and file formats.
An open source .NET deobfuscator and unpacker that restores packed and obfuscated assemblies by reversing various obfuscation techniques.
A .NET assembly debugger and editor that enables reverse engineering and dynamic analysis of compiled .NET applications without source code access.
Joe Sandbox Community provides automated cloud-based malware analysis across multiple OS platforms.