PROFILPELAJAR.COM

Radare2
	Shown is Iaito, the graphical user interface of Radare2
Original author(s)	Sergi Alvarez (pancake)
Developer(s)	pancake and the community
Stable release	5.9.6 / 13 October 2024
Repository	github.com/radare/radare2 ;
Written in	C
Operating system	Linux, BSD, macOS, Microsoft Windows, Haiku, Android, iOS, Solaris
Available in	English
Type	Disassembler
License	LGPL
Website	www.radare.org/n/

Radare2 (also known as r2) is a complete framework for reverse-engineering and analyzing binaries; composed of a set of small utilities that can be used together or independently from the command line. Built around a disassembler for computer software which generates assembly language source code from machine-executable code, it supports a variety of executable formats for different processor architectures and operating systems.

History

Radare2 was created in February 2006,^[3] aiming to provide a free and simple command-line interface for a hexadecimal editor supporting 64 bit offsets to make searches and recovering data from hard-disks, for forensic purposes. Since then, the project has grown with the aim changed to provide a complete framework for analyzing binaries while adhering to several principles of the Unix philosophy.^[4]

In 2009, the decision was made to completely rewrite it, to get around limitations in the initial design. Since then, the project continued to grow,^[5] and attracted several resident developers.

In 2016, the first r2con took place in Barcelona,^[6]^[7] gathering more than 100 participants, featuring various talks about various features and improvements of the framework.

Radare2 has been the focus of multiple presentations at several high-profile security conferences, like the recon,^[8] hack.lu,^[9] 33c3.^[3]

Features and usage

Radare2 has a steep learning curve since its main executable binaries are operated by command line and does not have a GUI by itself. Originally built around a hexadecimal editor, it has now a multitude of tools and features, and also bindings for several languages.^[10] Meanwhile it has a WebUI^[11] and the official graphical user interface project for Radare2 is called Iaito.^[12]

Static analysis

Radare2 is able to assemble and disassemble a lot of software programs, mainly executables, but it can also perform binary diffing with graphs,^[13] extract information like relocations symbols, and various other types of data. Internally, it uses a NoSQL database named sdb to keep track of analysis information that can be inferred by Radare2 or manually added by the user. Since it is able to deal with malformed binaries, it has also been used by software security researchers for analysis purposes.^[14]^[15]^[16]

Dynamic analysis

Radare2 has a built-in debugger that is lower-level than GDB.^{[citation needed]} It can also interface with GDB and WineDBG^[17] to debug Windows binaries on other systems. In addition, it can also be used as a kernel debugger with VMWare.

Software exploitation

Since it features a disassembler and a low-level debugger, Radare2 can be useful to developers of exploits. The software has features which assist in exploit development, such as a ROP gadget search engine and mitigation detection. Because of the software's flexibility and support for many file formats, it is often used by capture the flag teams^[18]^[19] and other security-oriented personnel.^[20] Radare2 can also assist in creating shellcodes with its 'ragg2' tool, similar to metasploit.

Graphical user interface (GUI)

Project Iaito has been developed as the first dedicated graphical user interface (GUI) for Radare2; it's been forked by Cutter as secondly developed graphical user interface (GUI) for Radare2. When the Cutter project was separated from Radare2 project at the end of 2020,^[21] Iaito was re-developed to be the current official Radare2 graphical user interface (GUI) maintained by Radare2 project members.^[12]

Supported architectures/formats

Recognized file formats
- COFF and derivatives, including Win32/64/generic PE
- ELF and derivatives
- Mach-O (Mach) and derivatives
- Game Boy and Game Boy Advance cartridges
- MZ (MS-DOS)
- Java class
- Lua 5.1 and Python bytecode
- dyld cache dump^[22]
- Dex (Dalvik EXecutable)
- Xbox xbe format^[23]
- Plan9 binaries
- WinRAR virtual machine^[24]
- File system like the ext family, ReiserFS, HFS+, NTFS, FAT, ...
- DWARF and PDB file formats for storing additional debug information
- Raw binary
Instruction sets
- Intel x86 family
- ARM architecture
- Atmel AVR series
- Brainfuck
- Motorola 68k and H8
- Ricoh 5A22
- MOS 6502
- Smartcard PSOS Virtual Machine
- Java virtual machine
- MIPS: mipsb/mipsl/mipsr/mipsrl/r5900b/r5900l
- PowerPC
- SPARC Family
- TMS320Cxxx series
- Argonaut RISC Core
- Intel 51 series: 8051/80251b/80251s/80930b/80930s
- Zilog Z80
- CR16
- Cambridge Silicon Radio (CSR)
- AndroidVM Dalvik
- DCPU-16
- EFI bytecode
- Game Boy (z80-like)
- Java Bytecode
- Malbolge
- MSIL/CIL
- Nios II
- SuperH
- Spc700
- Systemz
- TMS320
- V850
- Whitespace
- XCore

References

^ "Release 5.9.6". 13 October 2024. Retrieved 27 October 2024.
^ "radareorg/radare2". January 18, 2024 – via GitHub.
^ ^a ^b "Radare demystified". Chaos Computer Club media site. CCC. 2016-12-29. Retrieved 2016-12-29.
^ "I have written more than 300.000 code lines for Radare". www.cigtr.info. Archived from the original on 2018-11-03. Retrieved 2017-01-21.
^ CCC (29 December 2016), radare demystified, retrieved 2017-01-21
^ "r2con 2016". NCC Group. Retrieved 2017-01-21.
^ Bakken, Sam (2016-08-09). "The hacker behind open-source, reverse-engineering tool Radare..." NowSecure. Retrieved 2017-01-21.
^ "Recon 2015 Schedule". recon.cx. Retrieved 2017-01-21.
^ "Talks at Hack.lu 2015". Hack.lu 2015. Retrieved 2017-01-21.
^ "radareorg/radare2-bindings". December 12, 2023 – via GitHub.
^ "The new web interface". radare.today. Archived from the original on 2016-07-29.
^ ^a ^b "iaito". rada.re. Retrieved 14 August 2021.
^ ""Binary Diffing" visual en Linux con Radare2".
^ Arada, Eduardo De la (18 May 2024). "OSX/Leverage.a Analysis". cybersecurity.att.com.
^ "None" (PDF).
^ PHDays IV, May 21, 2014, 'Anton Kochkov', Application of radare2 illustrated by Shylock/Caphaw.D and Snakso.A analysis
^ "Gmane archive about WinDBG support in radare2".
^ "Plaid CTF 2014 - Tiffany writeup". Dragon Sector.
^ "DEFCON2K12 Prequals: pwn300 writeup". LSE Blog. June 4, 2012.
^ "manual binary mangling with radare". .:: Phrack Magazine ::.
^ "Announcing Rizin". rizin.re. 8 December 2020. Retrieved 8 December 2020.
^ "dyld_shared_cache - iPhone Development Wiki". iphonedev.wiki.
^ ".XBE File Format". www.caustik.com.
^ "Fun with Constrained Programming".

External links

[wikidata-a88c06f47b1faa8c589c96a141e26c1ffd7ada64-v18-1] "Release 5.9.6". 13 October 2024. Retrieved 27 October 2024.

[2] "radareorg/radare2". January 18, 2024 – via GitHub.

[:0-3] "Radare demystified". Chaos Computer Club media site. CCC. 2016-12-29. Retrieved 2016-12-29.

[4] "I have written more than 300.000 code lines for Radare". www.cigtr.info. Archived from the original on 2018-11-03. Retrieved 2017-01-21.

[5] CCC (29 December 2016), radare demystified, retrieved 2017-01-21

[6] "r2con 2016". NCC Group. Retrieved 2017-01-21.

[7] Bakken, Sam (2016-08-09). "The hacker behind open-source, reverse-engineering tool Radare..." NowSecure. Retrieved 2017-01-21.

[8] "Recon 2015 Schedule". recon.cx. Retrieved 2017-01-21.

[9] "Talks at Hack.lu 2015". Hack.lu 2015. Retrieved 2017-01-21.

[10] "radareorg/radare2-bindings". December 12, 2023 – via GitHub.

[11] "The new web interface". radare.today. Archived from the original on 2016-07-29.

[auto-12] "iaito". rada.re. Retrieved 14 August 2021.

[13] ""Binary Diffing" visual en Linux con Radare2".

[14] Arada, Eduardo De la (18 May 2024). "OSX/Leverage.a Analysis". cybersecurity.att.com.

[15] "None" (PDF).

[16] PHDays IV, May 21, 2014, 'Anton Kochkov', Application of radare2 illustrated by Shylock/Caphaw.D and Snakso.A analysis

[17] "Gmane archive about WinDBG support in radare2".

[18] "Plaid CTF 2014 - Tiffany writeup". Dragon Sector.

[19] "DEFCON2K12 Prequals: pwn300 writeup". LSE Blog. June 4, 2012.

[20] "manual binary mangling with radare". .:: Phrack Magazine ::.

[21] "Announcing Rizin". rizin.re. 8 December 2020. Retrieved 8 December 2020.

[22] "dyld_shared_cache - iPhone Development Wiki". iphonedev.wiki.

[23] ".XBE File Format". www.caustik.com.

[24] "Fun with Constrained Programming".

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]

[9]

[10]

[11]

[12]

[13]

[14]

[15]

[16]

[17]

[18]

[19]

[20]

[21]

[22]

[23]

[24]

PROFILPELAJAR.COM

Radare2

History

Features and usage

Static analysis

Dynamic analysis

Software exploitation

Graphical user interface (GUI)

Supported architectures/formats

References

Further reading

External links

Read other articles:

Napoleon (1995 film)

Awareness League

العلم والتنجيم

Покров (Максатихинский район)

Unidad Central de Protección

Bundesbildungsanstalt für Sozialpädagogik und Elementarpädagogik St. Pölten

ألفريد دنهيل المحدودة

S13 (classification)

History of Dallas (through 1838)

Uchen script

Where Have All the Good Times Gone

Anuradha Thakur

Water footprint

Flight 7500

List of Memphis Tigers head football coaches

Juris Hartmanis

Shubha Khote

Lovro Zovko

Otto Wallach

Disodium octaborate