Radare 2
"R2" is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files.

In order to run Radare
r2 programName
Start radare with -d flag to debug like gdb.
Like in vim, you can enter command mode with :

  • ?        Get information about characters you can use (also works like a?)
  • aaa        Automatically analyse and autoname functions.
  • afl        Print every function radare found.
  • s   newLocation        Change current location to newLocation (example sym.main).
  • pdf        Print the disassembly of current function.
  • VV        Enter visual mode, showing control graph

When running the control flow you will notice that rip (instruction pointer register is at the execution)
Command
Action
Example
db address
Sets breakpoint at address
db 0x004005bd
dc
Runs the program
-
s
Step to next instruction
-
S
Step to next non-library function
-
dr
Show what is in registers
-
ood
Reload file in debug mode
-
dr reg=value
Sets reg to value
dr=rip0x0040064b
afvn prevName newName
Renames variable
afvn local_2_4 sum
V!
Change to complete info grid
-

Command
Action
tab and shift+tab
select blocks
shift+hjkl
move the block
p
Cycle within different representations (with or without address in beginning for example)
?
Show Help
shift + r
change colors
Last modified 3yr ago
Copy link
On this page
Basics and Running
Commands
Control Flow
Visual Mode