mandiant/capa

View on GitHub

The FLARE team's open-source tool to identify capabilities in executable files.

Stars: 6.2k
Forks: 726
Open beginner issues: 0
Indexed issues: 250
Avg merge: 11d 11h
Merged PRs (30d): 7

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

250 open issues indexed

elffile: crash with `RuntimeError: generator raised StopIteration` when a relocation table tag lacks its companion size or entry-size tag Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

mandiant/capa#3171 · Opened Sep 7, 2026
elffile: crash with `ValueError: max() iterable argument is empty` when `DT_GNU_HASH` points at a removed `.gnu.hash` section Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/capa#3170 · Opened Sep 6, 2026
tree-sitter: fit script constants and attributes into existing feature set Open

enhancement gsoc question tree-sitter

mandiant/capa#3158 · 2 comments · 1 assignee · Opened Aug 17, 2026
elffile.py:181 yields Arch("arm"), which is not in VALID_ARCH Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

mandiant/capa#3155 · 1 comment · Opened Aug 15, 2026
tree-sitter: enable CI to verify scripts contain proper guards Open

CI enhancement gsoc tree-sitter

Difficulty 3/5 1-2 days Newbie friendliness 65/100

mandiant/capa#3153 · 2 comments · Opened Aug 13, 2026
tree-sitter: extract string features at file scope Open

enhancement gsoc tree-sitter

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

mandiant/capa#3152 · Opened Aug 13, 2026
tree-sitter: support UTF-16 and UTF-8 encodings Open

bug gsoc tree-sitter

Difficulty 4/5 3-5 days Newbie friendliness 58/100

mandiant/capa#3149 · 1 comment · Opened Aug 12, 2026
tree-sitter: add usage and extension documentation Open

documentation gsoc tree-sitter

mandiant/capa#3148 · 1 comment · 1 assignee · Opened Aug 12, 2026
tree-sitter: add support for Bash scripts Open

enhancement gsoc tree-sitter

mandiant/capa#3147 · 1 comment · 1 assignee · Opened Aug 12, 2026
tree-sitter: protobuf output incomplete Open

bug gsoc tree-sitter

mandiant/capa#3146 · 1 assignee · Opened Aug 12, 2026
testfiles: consider reevaluating all files to ensure runtime requirement is met Open

CI enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mandiant/capa#3141 · 2 comments · Opened Aug 11, 2026
capafmt breaks `description` field if namespace contains `features` Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

mandiant/capa#3134 · Opened Jul 28, 2026
move function-name feature matching to insn scope Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 52/100

mandiant/capa#3125 · 12 comments · Opened Jul 13, 2026
capa very verbose ghidra backend breaks Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

mandiant/capa#3120 · 2 comments · Opened Jul 1, 2026
capa analyzes Android ARM64 ELF .so as arch=unknown and returns no capabilities Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

mandiant/capa#3115 · 2 comments · Opened Jun 25, 2026
linter pass that checks nursery rule namespaces against existing directory structure Open

enhancement good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 48/100

mandiant/capa#3112 · 5 comments · Opened Jun 19, 2026
Document JSON schema Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

mandiant/capa#3111 · Opened Jun 17, 2026
ida: get_bytes may be padded with 0xFF for uninit'd bytes Open

breaking-change bug ida

Difficulty 1/5 1-3 hours Newbie friendliness 78/100

mandiant/capa#3104 · 4 comments · 1 reaction · Opened Jun 12, 2026
result document: consider documenting that child order is unspecified Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

mandiant/capa#3101 · 3 comments · Opened Jun 10, 2026
capa explorer: PyQt / PySide upgrade Open

ida-explorer

Difficulty 3/5 1-2 days Newbie friendliness 68/100

mandiant/capa#3095 · Opened Jun 5, 2026
Define a styleguide.md for Gemini Code Assist Bot Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mandiant/capa#3091 · Opened May 28, 2026
freeze format may emit import features with key "import_" rather than "import" Open

breaking-change bug

Difficulty 3/5 1-2 days Newbie friendliness 50/100

mandiant/capa#3085 · 5 comments · Opened May 20, 2026
Global Sub-rule Suppression Causes Silent Loss of Independent Capability Matches in Default CLI Output Open

bug question

Difficulty 4/5 3-5 days Newbie friendliness 52/100

mandiant/capa#3084 · 1 comment · Opened May 19, 2026
`CapeExtractor` version mismatch warning on self-hosted CAPE reports Open

bug cape

Difficulty 1/5 Under an hour Newbie friendliness 78/100

mandiant/capa#3082 · 2 comments · Opened May 19, 2026
viv_utils: vivisect version mismatch warning Open

bug viv-bug

Difficulty 3/5 1-2 days Newbie friendliness 38/100

mandiant/capa#3079 · Opened May 18, 2026
idea: optimize rule matching via bit sets Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

mandiant/capa#3074 · Opened May 13, 2026
idea: optimize regex/substring matching using literal prefix and Aho-Corasick Open

mandiant/capa#3073 · 8 comments · 1 assignee · Opened May 13, 2026
consider removing RelativeVirtualAddress Open

mandiant/capa#3072 · 6 comments · 1 assignee · Opened May 12, 2026
add AGENTS.md to explain to agents how to work with the codebase Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

mandiant/capa#3056 · Opened Apr 23, 2026
rule match snapshot tests Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mandiant/capa#3055 · Opened Apr 23, 2026
bug: inconsistent missing resource handling Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mandiant/capa#3010 · 1 comment · 1 reaction · Opened Apr 15, 2026
migrate freeze format to protobuf Open

breaking-change enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/capa#3005 · Opened Apr 13, 2026
ghidra: enable feature extraction from existing Ghidra project binary Open

enhancement ghidra help wanted

mandiant/capa#3004 · 7 comments · 1 assignee · Opened Apr 7, 2026
bug(ghidra): function truncation during analysis Open

bug ghidra

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mandiant/capa#2989 · 1 comment · Opened Apr 3, 2026
CI: pin web dependencies Open

CI enhancement

mandiant/capa#2970 · 1 assignee · Opened Mar 27, 2026
stale cache can crash with _RuleFeatureIndex.bytes_prefix_index AttributeError Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

mandiant/capa#2961 · Opened Mar 23, 2026
add "capa diff" to compare capability deltas between two samples Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mandiant/capa#2957 · 3 comments · Opened Mar 21, 2026
ida: we leave behind unpacked database files Open

breaking-change bug ida

Difficulty 3/5 1-2 days Newbie friendliness 48/100

mandiant/capa#2951 · 5 comments · Opened Mar 20, 2026
idalib: `open_database` fails to handle existing database files and exits prematurely Open

bug ida

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mandiant/capa#2950 · 1 comment · Opened Mar 20, 2026
CI: consider caching pip downloads in tests.yml Open

CI enhancement performance

Difficulty 3/5 1-2 days Newbie friendliness 68/100

mandiant/capa#2944 · 1 comment · 3 reactions · Opened Mar 18, 2026
Problem : Rule loader should reject unsupported logic edge cases Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mandiant/capa#2920 · 2 comments · Opened Mar 14, 2026
question: should static function scope and below matching be restricted to executable code sections Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/capa#2915 · 2 comments · Opened Mar 13, 2026
capa web "demo" Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mandiant/capa#2823 · 7 comments · Opened Jan 20, 2026
idalib: use -R for all open_database calls Open

ida

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mandiant/capa#2808 · 3 comments · Opened Jan 6, 2026
Errors analyzing several ELF binaries Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mandiant/capa#2780 · 3 comments · Opened Dec 1, 2025
ci: bump workflows to Python v3.14 Open

blocked CI

Difficulty 2/5 1-3 hours Newbie friendliness 32/100

mandiant/capa#2778 · 10 comments · Opened Nov 24, 2025
Capa can't find libbinaryninja.so.1 Open

binary-ninja bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mandiant/capa#2750 · 4 comments · Opened Nov 4, 2025
binja: embedded pe: offsets are virtual addresses rather than file offsets Open

binary-ninja bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/capa#2748 · 3 comments · Opened Nov 3, 2025
ida: embedded pe: offsets are virtual addresses rather than file offsets Open

bug ida

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mandiant/capa#2746 · Opened Nov 3, 2025
embedded pe: offsets are virtual addresses rather than file offsets Open

binary-ninja bug ghidra ida

Difficulty 4/5 3-5 days Newbie friendliness 45/100

mandiant/capa#2745 · 1 comment · 1 reaction · Opened Nov 3, 2025

mandiant/capa

Get new issues in your inbox