mandiant/capa

capa

✅ Recently maintained

The FLARE team's open-source tool to identify capabilities in executable files.

6,295Stars
744Forks
+227-day stars

Python · Apache-2.0 · Last push 2026-11-01

Official repository & installation ↗
malware-analysisreverse-engineeringbinary-analysisthreat-intelligencegsoc-2026

Star history

2025-09-292026-11-02
View historical data
DateStars
2026-10-046,204
2026-10-056,209
2026-10-066,210
2026-10-076,212
2026-10-086,215
2026-10-096,219
2026-10-106,223
2026-10-116,225
2026-10-126,228
2026-10-136,233
2026-10-146,238
2026-10-156,244
2026-10-166,247
2026-10-176,249
2026-10-186,253
2026-10-196,257
2026-10-206,261
2026-10-216,263
2026-10-226,266
2026-10-236,267
2026-10-246,271
2026-10-256,272
2026-10-266,274
2026-10-276,278
2026-10-286,279
2026-10-296,287
2026-10-306,289
2026-10-316,290
2026-11-016,294
2026-11-026,295

Get the project

git clone https://github.com/mandiant/capa.git

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.

x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

★ 50,137ghidra

NSA's open-source reverse engineering framework for disassembling, decompiling, and analyzing binaries.

★ 96,891public-apis

A community-maintained list of free APIs organized by category for developers.

★ 494,953