2021-05-16 19:26:20 +02:00
|
|
|
.Dd Jun 24, 2021
|
2014-09-30 11:01:45 +02:00
|
|
|
.Dt RAFIND2 1
|
2014-09-30 11:37:26 +02:00
|
|
|
.Sh NAME
|
|
|
|
|
.Nm rafind2
|
2021-05-25 10:51:18 +02:00
|
|
|
.Nd Advanced command-line hexadecimal editor
|
2010-06-18 17:52:30 +02:00
|
|
|
.Sh SYNOPSIS
|
|
|
|
|
.Nm rafind2
|
2021-05-28 13:02:12 +02:00
|
|
|
.Op Fl cijzZXLnrhqv
|
2011-12-02 03:43:08 +01:00
|
|
|
.Op Fl b Ar size
|
2010-06-18 17:52:30 +02:00
|
|
|
.Op Fl f Ar from
|
2020-06-29 20:11:34 +02:00
|
|
|
.Op Fl F Ar file
|
2010-06-18 17:52:30 +02:00
|
|
|
.Op Fl t Ar to
|
2011-12-02 03:43:08 +01:00
|
|
|
.Op Fl [m|s|e] Ar str
|
2010-06-18 17:52:30 +02:00
|
|
|
.Op Fl x Ar hex
|
2018-06-30 13:18:00 +02:00
|
|
|
.Ar file|dir
|
2010-06-18 17:52:30 +02:00
|
|
|
.Sh DESCRIPTION
|
|
|
|
|
rafind2 is a program to find byte patterns into files
|
|
|
|
|
.Pp
|
|
|
|
|
The options are:
|
|
|
|
|
.Bl -tag -width Fl
|
2021-05-16 19:26:20 +02:00
|
|
|
.It Fl c
|
|
|
|
|
Disable colorful output (for -X and such)
|
2010-06-18 17:52:30 +02:00
|
|
|
.It Fl z
|
|
|
|
|
Search for zero-terminated strings
|
2019-05-11 18:41:59 +02:00
|
|
|
.It Fl j
|
|
|
|
|
Output in JSON format
|
2015-10-18 23:32:33 +02:00
|
|
|
.It Fl a Ar align
|
|
|
|
|
Only accept aligned hits
|
2010-06-18 17:52:30 +02:00
|
|
|
.It Fl s Ar str
|
|
|
|
|
Search for a specific string
|
2015-02-04 16:19:17 -05:00
|
|
|
.It Fl S Ar str
|
|
|
|
|
Search for a specific wide string
|
2011-12-02 03:43:08 +01:00
|
|
|
.It Fl e Ar regex
|
|
|
|
|
Search for a regular expression string matches
|
2010-06-18 17:52:30 +02:00
|
|
|
.It Fl x Ar hex
|
|
|
|
|
Search for an hexpair string
|
2017-08-01 15:27:11 +02:00
|
|
|
.It Fl i
|
|
|
|
|
Identify filetype (like file, uses r2 -qcpm)
|
2021-05-28 13:02:12 +02:00
|
|
|
.It Fl L
|
|
|
|
|
List available IO plugins
|
2015-10-19 03:58:16 +02:00
|
|
|
.It Fl m
|
|
|
|
|
Carve for known file-types using the r_magic signatures
|
|
|
|
|
.It Fl M Ar mask
|
2011-12-02 03:43:08 +01:00
|
|
|
Set binary mask to be applied
|
2010-06-18 17:52:30 +02:00
|
|
|
.It Fl f Ar from
|
|
|
|
|
Specify the source adddress
|
2020-06-29 20:11:34 +02:00
|
|
|
.It Fl F Ar file
|
|
|
|
|
Read the keyword to search from the contents of the given file
|
2010-06-18 17:52:30 +02:00
|
|
|
.It Fl t Ar to
|
|
|
|
|
Specify the target adddress
|
2011-12-02 03:43:08 +01:00
|
|
|
.It Fl X
|
|
|
|
|
Display hexdump of search results
|
2013-02-14 20:08:42 +01:00
|
|
|
.It Fl Z
|
|
|
|
|
Display zero-terminated strings results
|
2011-12-02 03:43:08 +01:00
|
|
|
.It Fl n
|
|
|
|
|
Do not stop the search when a read error occurs
|
|
|
|
|
.It Fl r
|
|
|
|
|
Show output in radare commands
|
|
|
|
|
.It Fl b Ar size
|
|
|
|
|
Define block size
|
2018-06-30 13:29:38 +02:00
|
|
|
.It Fl q
|
|
|
|
|
Quiet mode - do not show headings (filenames) above matching contents (default for searching a single file)
|
2011-12-02 03:43:08 +01:00
|
|
|
.It Fl h
|
|
|
|
|
Show help message
|
|
|
|
|
.It Fl v
|
|
|
|
|
Print version and exit
|
2010-06-18 17:52:30 +02:00
|
|
|
.El
|
|
|
|
|
.Sh SEE ALSO
|
|
|
|
|
.Pp
|
2021-05-20 03:34:23 +02:00
|
|
|
.Xr radare2(1)
|
2010-06-18 17:52:30 +02:00
|
|
|
.Sh AUTHORS
|
|
|
|
|
.Pp
|
2013-11-11 12:00:39 +01:00
|
|
|
pancake <pancake@nopcode.org>
|
