# radare2

> Command-line reverse engineering framework for disassembling, analyzing, emulating, debugging and patching binaries across many architectures and file formats.

Stars: 25.2k · Language: C · Categories: Dev Tools

- Repository: https://github.com/radareorg/radare2
- Website: https://www.radare.org
- Page: https://www.trmn.sh/tools/radare2

## Install

- Source (Git): `git clone https://github.com/radareorg/radare2`
- Source (Git): `radare2/sys/install.sh`

## Overview

radare2 (r2) is a Unix-style reverse engineering framework: a set of libraries, command-line tools and plugins for analyzing and modifying binaries. It began as a command-line hex editor for forensics and is a full rewrite of the original radare. It is distributed under LGPLv3, though individual plugins may carry different licenses (listed by `r2 -Lj`).

The main interface is an interactive shell. A typical session runs `r2 /bin/ls`, then `aaa` to analyze, `afl` to list functions, `px` for hexdumps, `s` to seek, `pdf` to disassemble a function, `agf` for an ASCII-art function graph, and `iS`/`is` to list sections and symbols (equivalent to `rabin2 -Ss`). Files can be reopened read-write (`oo+`) and patched with `w`. r2 can edit files on local disks, view kernel memory, and debug programs locally or through remote gdb/windbg servers. Scripting is available through an embedded JavaScript interpreter or through r2pipe, which drives r2 from other languages.

Coverage is broad. The README lists dozens of CPU architectures (x86, ARM, MIPS, RISC-V, AVR, WebAssembly, Dalvik, Java and others), file formats (ELF, Mach-O, PE, DEX, Dyldcache, UEFI and others), userland mounting of filesystems such as NTFS, APFS, EXT and FAT, and many operating systems including Windows, Linux, macOS, Android and the BSDs.

The `r2pm` package manager searches for, installs and removes plugins. Listed examples include r2ghidra (Ghidra decompiler via `pdg`), r2frida, r2yara, r2diaphora, the iaito Qt GUI, and the AI plugins r2ai and decai. The tool is used by reverse engineers, malware analysts, exploit developers and security researchers.

### Installation

```bash
# via Source (Git)
git clone https://github.com/radareorg/radare2
radare2/sys/install.sh
```

![radare2 screenshot](https://media.trmn.sh/cached/ffbf5cc6589a822e1a12eec8265218f0ccb50de791a0bcc15ef406dd1ec6253f.png)

## Alternatives

- [entr](https://www.trmn.sh/tools/entr.md): Runs arbitrary commands when files change using kqueue or inotify to avoid polling (C, 5.7k stars)
- [Chafa](https://www.trmn.sh/tools/chafa.md): Command-line utility that converts images and animated GIFs into ANSI/Unicode character art or terminal graphics formats, built on a C library. (C, 5.4k stars)
- [FFmpeg](https://www.trmn.sh/tools/ffmpeg.md): Collection of libraries and command-line tools (ffmpeg, ffplay, ffprobe) for converting, streaming, playing and inspecting audio, video and subtitles. (C, 66.0k stars)
- [asdf](https://www.trmn.sh/tools/asdf.md): Version manager that handles multiple language runtimes per project through plugins, using a single CLI and a .tool-versions file. (Go, 25.6k stars)
- [difftastic](https://www.trmn.sh/tools/difftastic.md): Structural diff tool that compares files based on their syntax rather than lines (Rust, 26.1k stars)

---

Canonical: https://www.trmn.sh/tools/radare2