radare/radare2
Radare2
radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable.
The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland.
The toolset supports binary patching, malware analysis, and software vulnerability research. It features a plugin-based architecture to extend core functionality and an embedded scripting engine to automate analysis workflows.
Features
- Multi-Architecture Engines - Maps machine-specific opcodes to a generic internal representation to support various CPU instruction sets.
- Reverse Engineering Tools - Provides a comprehensive environment for analyzing the internal logic and structure of compiled applications.
- Layered Analysis Pipelines - Processes raw bytes through successive stages of format parsing, disassembly, and high-level structural analysis.
- Binary and Reverse Engineering - Provides a comprehensive framework for analyzing, disassembling, and profiling compiled binaries.
- Debugging and Analysis - Implements a framework for debugging, disassembling, and analyzing binaries locally and via remote servers.
- Binary Format Parsers - Reads and interprets various binary file formats and object layouts to retrieve structural information.
- Analysis Shells - Implements a custom shell with a domain-specific language to control binary analysis states.
- Binary Debuggers - Implements a debugger that operates directly on compiled binaries without requiring original source code.
- Multi-Stage Analysis Pipelines - Processes raw bytes through sequential stages of parsing, disassembly, and structural analysis.
- Binary Analysis Capabilities - Provides comprehensive tools for inspecting and analyzing the internal structure of compiled binary files.
- Binary Analysis Tools - Ships a comprehensive toolset for inspecting, disassembling, and extracting information from compiled binary files.
- Binary Disassembly - Translates machine code into assembly language to identify program structures across multiple hardware architectures.
- Binary Content Editors - Allows direct modification of raw binary bytes on local storage or in memory to alter application behavior.
- Low-Level Debuggers - Monitors and modifies running processes across different hardware architectures to identify bugs and analyze behavior.
- Domain Specific Languages - Uses a custom domain-specific language to manipulate internal analysis states and the binary processing pipeline.
- Binary Patching Utilities - Allows direct modification of compiled software binaries to alter functionality or resources via hexadecimal editing.
- Hexadecimal Editors - Provides a hexadecimal editor to modify binary files on local storage or within kernel memory.
- Embedded Scripting Engines - Integrates a scripting engine to automate complex analysis sequences and programmatically manipulate binary data.
- Task Automation Scripts - Executes automated analysis tasks through an embedded script interpreter or remote programming interface.
- Automated Analysis Pipelines - Integrates binary analysis into automated workflows via interfaces compatible with external programming languages.
- Binary Diffing - Identifies differences in structure or instructions between two binary files to detect changes across versions.
- Decompilers - Translates low-level binary machine code back into higher-level source code using internal and external engines.
- Remote Debugging Protocols - Provides a client-server protocol for monitoring and modifying running processes across different hosts.
- Userland Filesystem Analyzers - Browses and extracts information from various disk filesystem formats directly within userland.
- Symbolic Execution Engines - Executes symbolic paths to explore program flows and discover inputs that trigger specific code branches.
- Scripting Runtimes - Integrates an embeddable language runtime to automate analysis and manipulate binary data.
- Malware Analysis - Provides tools and techniques for the reverse engineering and behavioral analysis of malicious software.
- Vulnerability Research - Enables the systematic investigation and identification of unknown security weaknesses in compiled software.
- Digital Forensics and Analysis - Facilitates deep-dive investigation and evidence preservation through the analysis of binary data and filesystems.
- Third-Party Plugins - Adds specialized tools and third-party integrations using a dedicated plugin system and package management.
- Plugin-Based Architectures - Uses a plugin-based architecture to load shared object modules at runtime for extended analysis functionality.
- Tooling Plugin Systems - Implements a tooling plugin system that loads external compiled modules to extend binary analysis capabilities.
- Analysis Tools - Command-line framework for reverse engineering and binary analysis.
- Development Libraries - Portable framework for binary analysis, disassembly, and debugging.
- Reverse Engineering - Versatile and portable framework for reverse engineering tasks.
- Reverse Engineering Tools - Comprehensive framework for reverse engineering and binary analysis.
- Reverse Engineering - Portable framework for reverse engineering.
- Reverse Engineering Tools - Comprehensive framework for reverse engineering and binary analysis.
- Security Frameworks - Framework for reverse engineering and binary analysis.
