radare2

Powerful CLI reverse-engineering framework.

KaliParrotLinuxpassive

pkg: radare2

radare2 disassembles, debugs, patches and analyses binaries from a scriptable command-line interface.

Syntax

r2 [-d] {binary}

Example

r2 -A ./binary # then: afl; pdf @ main

Auto-analyses the binary; lists functions (afl) and disassembles main (pdf @ main).

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-dOpen in debug mode.
-AAnalyze all on load (aaa).
-wOpen in write mode (patching).
-c <pdf @ main>Run a command at start.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

radare2

Usage examples

r2 -A ./binary

Auto-analyse, then explore (afl, pdf @ main).

r2 -d ./binary

Debug the binary.

Advantages
  • Free, scriptable, very capable
  • Disasm + debug + patch in one
  • Huge command set / r2pipe API
Disadvantages
  • Notoriously steep learning curve
  • Terse command syntax
  • GUI (Cutter) is separate
Tags
#disassembly#binary

Official docs: radare2

Related commands

Frequently asked questions

What is radare2 used for?
radare2 disassembles, debugs, patches and analyses binaries from a scriptable command-line interface.
What is an example radare2 command?
A common example is: r2 -A ./binary # then: afl; pdf @ main — Auto-analyses the binary; lists functions (afl) and disassembles main (pdf @ main).
Is radare2 part of Kali Linux?
Yes. radare2 ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install radare2.
What category of security tool is radare2?
radare2 is a Reverse Engineering tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →