UNIX-like reverse engineering framework and command-line toolset
Go to file
2017-12-30 20:16:29 +01:00
.github Add an issue template 2017-12-27 21:21:56 +01:00
binr Fix typo regarding byte size (#9067) 2017-12-27 18:33:58 +01:00
doc Add a stupid fortune 2017-12-27 00:43:01 +01:00
libr Add fsqrt operator for x86 assembler (Square Root) 2017-12-30 20:16:29 +01:00
man Make constructor/destructors available only via rabin2 -ee (and iee in r2) 2017-10-30 18:31:01 +01:00
mk Adding node testsuite to appveyor (#8313) 2017-12-02 23:42:47 +08:00
pkgcfg Honor Capstone, LibSSL and Libmagic ldflags in pkgconfig files 2017-11-23 16:54:50 +01:00
prefix
shlr Fix typo regarding byte size (#9067) 2017-12-27 18:33:58 +01:00
sys Use r2 -HLIBEXT in sys/apia 2017-12-18 16:54:55 +01:00
t Better t/Makefile 2017-03-20 01:27:31 +01:00
.appveyor.yml Translated meson.bat to sys/meson.py (#9011) 2017-12-13 15:07:01 +01:00
.gitignore Translated meson.bat to sys/meson.py (#9011) 2017-12-13 15:07:01 +01:00
.travis.yml Fix travis cfg (node now in make -k all) (#8269) 2017-08-22 14:40:01 +02:00
AUTHORS.md WIP - Totally remove host endianness dependence 2016-05-04 23:42:17 +10:00
autogen.sh
config-user.mk.acr Fix #8653 - Fix spp build for iOS and enhance ios-sdk.sh 2017-10-09 01:56:44 +02:00
configure After release version bump 2017-12-27 10:44:38 +01:00
configure-plugins Fix meson build on macOS 2017-05-14 23:15:07 +02:00
configure.acr After release version bump 2017-12-27 10:44:38 +01:00
configure.hook
CONTRIBUTING.md Fix typo in CONTRIBUTING.md 2017-12-13 10:15:22 +01:00
COPYING
COPYING.LESSER
DEVELOPERS.md Update DEVELOPERS.md 2016-03-06 00:43:12 +01:00
Dockerfile Fix #8114 - dockerfile: use node v8, better install npm 2017-08-03 14:04:03 +02:00
env.sh env.sh: wrap arguments around "" and no special handling for last arg 2016-02-25 13:33:17 +01:00
global.mk
Makefile Remove the umask hack 2017-12-20 15:39:11 +01:00
meson_options.txt Add dummy meson_options.txt 2017-05-09 23:54:02 +02:00
meson.build Added dynamic linking build for Appveyor (#8948) 2017-12-03 21:26:13 +01:00
package.json Appveyor windows-installer integration 2017-06-05 11:00:51 +02:00
plugins.bin.cfg psosvm plugins are not in core 2017-09-26 13:37:11 +02:00
plugins.def.cfg WASM analysis - initial stub (#9091) 2017-12-29 19:56:33 +01:00
plugins.emscripten.cfg psosvm plugins are not in core 2017-09-26 13:37:11 +02:00
plugins.ios-store.cfg Fix ios-sdk builds 2017-07-04 19:16:24 +02:00
plugins.ios.cfg Fix ios-sdk builds 2017-07-04 19:16:24 +02:00
plugins.meson.cfg WASM analysis - initial stub (#9091) 2017-12-29 19:56:33 +01:00
plugins.nogpl.cfg Renamed windbg plugin (#8117) 2017-08-03 14:58:39 +02:00
plugins.tiny.cfg Remove x86.tab from r2 master (moved to extras) 2016-07-25 03:47:47 +02:00
radare2.spec
README.md r2pipe-python binding name change 2017-11-15 10:44:24 -05:00
Vagrantfile Add Vagrantfile for radare2 + ArchLinux 2017-12-19 00:50:56 +01:00
Vagrantfile.sh Add Vagrantfile for radare2 + ArchLinux 2017-12-19 00:50:56 +01:00

    ____  ___  ___  ___ ____  ___    ____
   |  _ \/   \|   \/   \  _ \/ _ \  |__  \
   |    (  V  | |  ) V  |   (   _/   / __/
   |__\__|_|__|___/__|__|_\__|___|  |____|

                www.radare.org

                                  --pancake
Jenkins Build Status
TravisCI Build Status
AppVeyor Build Status
Coverity Build Status

Introduction

r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files.

Radare project started as a forensics tool, a scriptable commandline hexadecimal editor able to open disk files, but later support for analyzing binaries, disassembling code, debugging programs, attaching to remote gdb servers, ..

radare2 is portable.

  • Architectures: * 6502, 8051, CRIS, H8/300, LH5801, T8200, arc, arm, avr, bf, blackfin, xap, dalvik, dcpu16, gameboy, i386, i4004, i8080, m68k, malbolge, mips, msil, msp430, nios II, powerpc, rar, sh, snes, sparc, tms320 (c54x c55x c55+), V810, x86-64, zimg, risc-v.

  • File Formats: * bios, CGC, dex, elf, elf64, filesystem, java, fatmach0, mach0, mach0-64, MZ, PE, PE+, TE, COFF, plan9, dyldcache, Commodore VICE emulator, Game Boy (Advance), Nintendo DS ROMs and Nintendo 3DS FIRMs.

  • Operating Systems: * Android, GNU/Linux, [Net|Free|Open]BSD, iOS, OSX, QNX, w32, w64, Solaris, Haiku, FirefoxOS

  • Bindings: * Vala/Genie, Python (2, 3), NodeJS, Lua, Go, Perl, Guile, php5, newlisp, Ruby, Java, OCaml, ...

Dependencies

radare2 can be built without any special dependency, just use make and get a working toolchain (gcc, clang, tcc, ..)

Optionally you can use libewf for loading EnCase disk images.

To build the bindings you need latest valabind, g++ and swig2.

Install

The easiest way to install radare2 from git is by running the following command:

$ sys/install.sh

If you want to install radare2 in the home directory without using root privileges and sudo, simply run:

$ sys/user.sh

Building with meson + ninja

The sys/install.sh method uses acr+make to build r2 from sources, which is the default and recommended way, but there's also a work-in-progress support for Meson.

Run first the configuration process:

$ ./configure

You can install last version of meson and ninja using r2pm:

$ r2pm -i meson
$ r2pm -r make meson
$ r2pm -r make meson-symstall

Or just run those lines if you have them available in PATH:

$ make meson                # will run make meson-config automatically
$ sudo make meson-symstall  # symstall the meson build into PREFIX (/usr)
$ sudo make meson-uninstall # uninstall the meson installation

The PREFIX is inherited from the last run of ./configure, so it's recommended to run sys/install.sh at least once to autodetect this, this step will end up into meson.

At the moment, the meson build system doesnt supports much configuration options and it is not able to build all the plugins, it has been tested to work on the following hosts:

  • Rpi3-arm32
  • macOS-x86-64
  • Termux/Android-arm64
  • VoidLinux-x86-64
  • Windows-x86-64

Update

To update Radare2 system wide you don't need to uninstall or pull, just re-run:

$ sys/install.sh

If you installed Radare2 in the home directory, just re-run:

$ sys/user.sh

Uninstall

In case of a polluted filesystem you can uninstall the current version or remove all previous installations:

$ make uninstall
$ make purge

Package manager

Radare2 has its own package manager - r2pm. It's packages repository is on GitHub too. To start to use it for the first time you need to initialize packages:

$ r2pm init

Refresh the packages database before installing any package:

$ r2pm update

To install a package use the following command:

$ r2pm install [package name]

Bindings

All language bindings are under the r2-bindings directory. You will need to install swig and valabind in order to build the bindings for Python, Lua, etc..

APIs are defined in vapi files which are then translated to swig interfaces, nodejs-ffi or other and then compiled.

The easiest way to install the python bindings is to run:

$ r2pm install lang-python2 #lang-python3 for python3 bindings
$ r2pm install r2api-python
$ r2pm install r2pipe-py

In addition there are r2pipe bindings, which are an API interface to interact with the prompt, passing commands and receivent the output as a string, many commands support JSON output, so it's integrated easily with many languages in order to deserialize it into native objects.

$ npm install r2pipe   # NodeJS
$ gem install r2pipe   # Ruby
$ pip install r2pipe   # Python
$ opam install radare2 # OCaml

And also for Go, Rust, Swift, D, .NET, Java, NewLisp, Perl, Haskell, Vala, OCaml, and many more to come!

Regression Testsuite

Running make tests it will fetch the radare2-regressions repository and run all the tests in order to verify that no changes break a functionality.

We run those tests on every commit, and they are also executed with ASAN and valgrind on different platforms to catch other unwanted 'features'.

Documentation

There is no formal documentation of r2 yet. Not all commands are compatible with radare1, so the best way to learn how to do stuff in r2 is by reading the examples from the web and appending '?' to every command you are interested in.

Commands are small mnemonics of few characters and there is some extra syntax sugar that makes the shell much more pleasant for scripting and interacting with the apis.

You could also checkout the radare2 book.

Coding Style

Look at CONTRIBUTING.md.

Webserver

radare2 comes with an embedded webserver that serves a pure html/js interface that sends ajax queries to the core and aims to implement an usable UI for phones, tablets and desktops.

$ r2 -c=H /bin/ls

To use the webserver on Windows, you require a cmd instance with administrator rights. To start the webserver use command in the project root.

> radare2.exe -c=H rax2.exe

Pointers

Website: http://www.radare.org/

IRC: irc.freenode.net #radare

Telegram: https://t.me/radare

Matrix: @radare2:matrix.org

Twitter: @radareorg