Advanced reverse engineering framework for binary analysis, disassembly, debugging, and patching with scriptable console.
radare2 -A {binary} ๐ binary โ radare2 -A {binary} Sandbox: execFile · Timeout: 600s
reverse.disassembly reverse.analysis reverse.debugging reverse.patching reverse.scripting | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
analyze | boolean | No | - | Automatically analyze the binary after loading | -A |
debug | boolean | No | - | Start in debug mode | -d |
quiet | boolean | No | - | Quiet mode (suppress banners) | -q |
write | boolean | No | - | Open file in write mode for patching | -w |
script | string | No | - | Run commands from script file | -i |
command | string | No | - | Run a single command and exit | -c |
project | string | No | - | Use a project file | -p |
seek | string | No | - | Seek to a specific address | -s |
bits | integer | No | - | Set CPU bits (32 or 64) | -b |
arch | string | No | - | Set target architecture | -a |
eval | string | No | - | Evaluate a configuration variable | -e |
H | boolean | No | - | display help | -H |
L | boolean | No | - | list supported plugins/architectures | -L |
file | string | No | - | Binary file to analyze | - |
n | boolean | No | - | no analysis (raw mode) | -n |
r | boolean | No | - | use ragui (web/gtk) | -r |
v | boolean | No | - | show version | -v |
Inputs
file.binary Binary file to analyze
Outputs
analysis.disassembly Disassembled code listing
analysis.metadata Binary analysis metadata
filesystem_write Produces
analysis.disassemblyanalysis.metadataConsumes
file.binary| Resource | Value |
|---|---|
| CPU | medium |
| Memory | 256 MB |
| Network | low |
| Disk I/O | medium |
Analyze a binary and open interactive shell
radare2 -A /bin/ls Analyze and run commands non-interactively
radare2 -A -q -c "afl" /bin/ls Open binary in debug mode
radare2 -d /bin/ls Open with write mode for patching
radare2 -w /bin/ls Specify architecture and bits
radare2 -a arm -b 32 firmware.bin Run script against binary
radare2 -A -i analyze.r2 /bin/ls radare2 is a portable reverse engineering framework providing a complete toolchain for binary analysis, disassembly, debugging, and patching. It features a powerful scriptable console, supports dozens of architectures, and can be extended via plugins.
| Command | Action |
|---|---|
afl |
List all functions |
pdf @sym.main |
Print disassembly of main |
VV |
Visual graph mode |
pxr @ rsp |
Show stack references |
iz |
List strings in data section |
# Analyze and list functions
radare2 -A -q -c "afl" /bin/ls
# Disassemble main function
radare2 -A -q -c "s sym.main; pdf" /bin/ls