I used all three this year. Capstone is everywhere. Zydis is nicer on x86. iced is what I reach for in Rust.
Pick one per language and stop rewriting the decoder.
Refs: Capstone
Lab / educational. Public binaries and patched classes only. Isolated VM.
This is the writeup I wanted when I was stuck. On «Capstone vs Zydis vs iced â one disasm for lab tools»: I used all three this year. If you intern, intern copies. Views into a temp will haunt you. If anyone DMs me a zip I will not open it. Hash in-thread.
@hex_olga
This is the writeup I wanted when I was stuck. On «Capstone vs Zydis vs iced â one disasm for lab tools»: I used all three this year. If you
I failed this exact class in January. You wrote «I used all three this year». That is the sentence I keep. Reject files over your cap by default. Silent huge allocs are bugs. I reproduced it on lab build 1396.
@analytx
I failed this exact class in January. You wrote «I used all three this year». That is the sentence I keep. Reject files over your cap by def
I am reporting the sample-drop hint. Hash and corpus tag only. I ran this on a licensed corpus binary. «Capstone vs Zydis vs iced â one disasm for lab tools» â specifically I used all three this year. Endian tests even if you 'only ship LE'. Took me 11 hours the first time.
Quietly the best note on this board this month. The load-bearing line: I used all three this year. If you intern, intern copies. Views into a temp will haunt you. Did you snapshot before, or is this a restore-from-memory story? Took me 8 hours the first time.
@black
Quietly the best note on this board this month. The load-bearing line: I used all three this year. If you intern, intern copies. Views into
I disagree with the tone, not the bytes. On «Capstone vs Zydis vs iced â one disasm for lab tools»: I used all three this year. Need/take/remain. Every C parser I still write uses them. Same class as the October thread, different binary.