radare/radare2

Features

• Multi-Architecture Engines - Maps machine-specific opcodes to a generic internal representation to support various CPU instruction sets.
• Reverse Engineering Tools - Provides a comprehensive environment for analyzing the internal logic and structure of compiled applications.
• Layered Analysis Pipelines - Processes raw bytes through successive stages of format parsing, disassembly, and high-level structural analysis.
• Binary and Reverse Engineering - Provides a comprehensive framework for analyzing, disassembling, and profiling compiled binaries.
• Debugging and Analysis - Implements a framework for debugging, disassembling, and analyzing binaries locally and via remote servers.
• Binary Format Parsers - Reads and interprets various binary file formats and object layouts to retrieve structural information.
• Analysis Shells - Implements a custom shell with a domain-specific language to control binary analysis states.
• Binary Debuggers - Implements a debugger that operates directly on compiled binaries without requiring original source code.
• Multi-Stage Analysis Pipelines - Processes raw bytes through sequential stages of parsing, disassembly, and structural analysis.
• Binary Analysis Capabilities - Provides comprehensive tools for inspecting and analyzing the internal structure of compiled binary files.
• Binary Analysis Tools - Ships a comprehensive toolset for inspecting, disassembling, and extracting information from compiled binary files.
• Binary Disassembly - Translates machine code into assembly language to identify program structures across multiple hardware architectures.
• Binary Content Editors - Allows direct modification of raw binary bytes on local storage or in memory to alter application behavior.
• Low-Level Debuggers - Monitors and modifies running processes across different hardware architectures to identify bugs and analyze behavior.
• Domain Specific Languages - Uses a custom domain-specific language to manipulate internal analysis states and the binary processing pipeline.
• Binary Patching Utilities - Allows direct modification of compiled software binaries to alter functionality or resources via hexadecimal editing.
• Hexadecimal Editors - Provides a hexadecimal editor to modify binary files on local storage or within kernel memory.
• Embedded Scripting Engines - Integrates a scripting engine to automate complex analysis sequences and programmatically manipulate binary data.
• Task Automation Scripts - Executes automated analysis tasks through an embedded script interpreter or remote programming interface.
• Automated Analysis Pipelines - Integrates binary analysis into automated workflows via interfaces compatible with external programming languages.
• Binary Diffing - Identifies differences in structure or instructions between two binary files to detect changes across versions.
• Decompilers - Translates low-level binary machine code back into higher-level source code using internal and external engines.
• Remote Debugging Protocols - Provides a client-server protocol for monitoring and modifying running processes across different hosts.
• Userland Filesystem Analyzers - Browses and extracts information from various disk filesystem formats directly within userland.
• Symbolic Execution Engines - Executes symbolic paths to explore program flows and discover inputs that trigger specific code branches.
• Scripting Runtimes - Integrates an embeddable language runtime to automate analysis and manipulate binary data.
• Malware Analysis - Provides tools and techniques for the reverse engineering and behavioral analysis of malicious software.
• Vulnerability Research - Enables the systematic investigation and identification of unknown security weaknesses in compiled software.
• Digital Forensics and Analysis - Facilitates deep-dive investigation and evidence preservation through the analysis of binary data and filesystems.
• Third-Party Plugins - Adds specialized tools and third-party integrations using a dedicated plugin system and package management.
• Plugin-Based Architectures - Uses a plugin-based architecture to load shared object modules at runtime for extended analysis functionality.
• Tooling Plugin Systems - Implements a tooling plugin system that loads external compiled modules to extend binary analysis capabilities.
• Analysis Tools - Command-line framework for reverse engineering and binary analysis.
• Reverse Engineering - Versatile and portable framework for reverse engineering tasks.
• Reverse Engineering Tools - Comprehensive framework for reverse engineering and binary analysis.
• Reverse Engineering - Portable framework for reverse engineering.
• Reverse Engineering Tools - Comprehensive framework for reverse engineering and binary analysis.
• Security Frameworks - Framework for reverse engineering and binary analysis.

Star history