Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
unix-like reverse engineering framework and commandline tools
C JavaScript C++ Makefile CSS Shell Other

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
binr Fix PDB nullderef in rbininfo.file
build Remove unused r_alloca_*
doc Fix issue with XMM on linux64 (pid vs tid)
libr Remove debug printf, fix crash in rabin2 -qzz
man Fix #2049 - Add rahash2 -j
media Add periodic table cheatsheet and update a2f a bit
mk Fix coverity issues with ROP search and more pic flags for lollipop
pkgcfg Fixes to make RBin/RIO more consistent for bindings
prefix Better webui, 'pi' counts opcodes and remove /new and htmlgraph
shlr Update sdb to fix cygwin build issue
sys Bump capstone and check toolchain in mingw64.sh
.gitignore Ignore libr/include/r_version.h
.travis.yml Update .travis.yml
AUTHORS.md AUTHORS, DEVELOPERS => .md
COPYING Honor FSF filename license rules (LICENSE->COPYING)
COPYING.LESSER Honor FSF filename license rules (LICENSE->COPYING)
DEVELOPERS.md Remove mailing list mention in DEVELOPERS.md
Jamroot Somewhat better BoostJam support
Makefile Remove more unnecessary files from capstone in `make dist`
README.md Add a disassembler for Sharp LH5801 processors
TODO.md Fix latest COVs
autogen.sh Updated ACR source from Hg -> Git
config-user.mk.acr Build is now 30% faster
configure Update configure
configure-plugins Add RBufferSparse API and sparse:// io plugin
configure.acr Don't report USE_LIB_ZIP twice
configure.hook Fix #745 - make mrproper after configure
env.sh Add `user-install` and `user-uninstall` make targets
global.mk More improvements for cygwin and mingw32 building
plugins.def.cfg add LH5801 to plugins.def.cfg
plugins.emscripten.cfg Add io.sparse in plugins.*.cfg
plugins.nogpl.cfg Add io.sparse in plugins.*.cfg
plugins.tiny.cfg Add io.sparse in plugins.*.cfg
radare2.spec RPM spec file update, setgroup patch for lint compliance

README.md

    ____  ___  ___  ___ ____  ___    ____
   |  _ \/   \|   \/   \  _ \/ _ \  |__  \
   |    (  V  | |  ) V  |   (   _/   / __/ 
   |__\__|_|__|___/__|__|_\__|___|  |____|

                www.radare.org

                                  --pancake

Build Status

Build Status

Introduction

r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files

This is the rewrite of radare (1.x branch) to provide a framework with a set of libraries and programs to work with binary data.

Radare project started as a forensics tool, an scriptable commandline hexadecimal editor able to open disk files, but later support for analyzing binaries, disassembling code, debugging programs, attaching to remote gdb servers, ..

radare2 is portable.

Architectures:

6502, 8051, arm, arc, avr, bf, tms320 (c54x, c55x, c55+), gameboy csr, dcpu16, dalvik, i8080, mips, m68k, mips, msil, snes, nios II, sh, sparc, rar, powerpc, i386, x86-64, H8/300, malbolge, T8200, LH5801

File Formats:

bios, dex, elf, elf64, filesystem, java, fatmach0, mach0, mach0-64, MZ, PE, PE+, TE, COFF, plan9, bios, dyldcache, Gameboy and Nintendo DS ROMs

Operating Systems:

Android, GNU/Linux, [Net|Free|Open]BSD, iOS, OSX, QNX, w32, w64, Solaris, Haiku, FirefoxOS

Bindings:

Vala/Genie, Python (2, 3), NodeJS, LUA, Go, Perl, Guile, php5, newlisp, Ruby, Java, OCAML, ...

Dependencies

radare2 can be built without any special dependency, just use make and get a working toolchain (gcc, clang, tcc, ..)

Optionally you can use libewf for loading EnCase disk images.

To build the bindings you need latest valabind, g++ and swig2.

Install

The easiest way to install radare2 from git is by running the following command:

$ sys/install.sh

Uninstall

In case of a polluted filesystem you can uninstall the current version or remove all previous installations:

$ make uninstall
$ make purge

Bindings

All language bindings are under the r2-bindings directory. You will need to install swig2 and valabind in order to build the bindings for Python, LUA, etc..

APIs are defined in vapi files which are then translated to swig interfaces, nodejs-ffi or other and then compiled.

The easiest way to install the python bindings is to run:

$ sys/python.sh

If you want to use the NodeJS bindings just do:

$ npm install radare2.js

To specify the installed version of radare2:

$ npm install radare2.js@0.9.2

Tests

There is a test suite that can be retrieved by running:

$ make tests

Documentation

There is no formal documentation of r2 yet. Not all commands are compatible with radare1, so the best way to learn how to do stuff in r2 is by reading the examples from the web and appending '?' to every command you are interested in.

Commands are small mnemonics of few characters and there is some extra syntax sugar that makes the shell much more pleasant for scripting and interacting with the apis.

Webserver

radare2 comes with an embedded webserver that serves a pure html/js interface that sends ajax queries to the core and aims to implement an usable UI for phones, tablets and desktops.

$ r2 -c=H /bin/ls

Pointers

Website: http://www.radare.org/

IRC: irc.freenode.net #radare

Twitter: @radareorg

Something went wrong with that request. Please try again.