https://github.com/coleellis/howto-radare2

Guide on using Radare2
https://github.com/coleellis/howto-radare2

Last synced: about 2 months ago
JSON representation

Guide on using Radare2

• Host: GitHub
• URL: https://github.com/coleellis/howto-radare2
• Owner: coleellis
• Created: 2023-10-23T13:35:00.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2023-11-06T16:51:48.000Z (about 1 year ago)
• Last Synced: 2024-09-25T20:43:58.003Z (3 months ago)
• Homepage: https://r2.coleellis.com
• Size: 1.11 MB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# How-To: Radare2

Radare2 is one of the most powerful debuggers out there. It is a command-line tool with a rather unintuitive interface, but once you get used to it, it is very powerful. `radare2` is a major step from `gdb` because of the decompilation tools it offers.

`radare2` is especially powerful on 64-bit binaries because it automatically resolves function signatures and strings. This makes it easy to understand the underlying C code of the binary.

{% hint style="warning" %}

#### Forewarning

Radare2 is basically the equivalent of using **Vim** instead of another text editor (like Nano). `gdb` is far more straightforward, but the feature set of radare2 can make it worth your time. It's a fantastic tool for reverse engineering and binex if appropriately used.

If you don't care to learn a new tool, spend the effort to become a master at `gdb`.

{% endhint %}

## Installation

Installation depends on the operating system you are running. The main two operating systems I expect are Kali and Ubuntu Linux. Here is how you install for each:

{% tabs %}

{% tab title="Kali Linux" %}

```nasm

sudo apt install radare2

```

{% endtab %}

{% tab title="Ubuntu Linux" %}

```nasm

git clone https://github.com/radareorg/radare2

radare2/sys/install.sh

```

{% endtab %}

{% endtabs %}

## Usage

You can analyze and run the binary for debugging using the following command:

```nasm

r2 -d -A 

```

We use the `-d` and `-A` flags to speed our development process by preemptively analyzing the binary. You can open a binary without these flags (with `radare2 `); however, you will need to run the analysis commands yourself.

## Coming Soon

These are some topics that I plan to cover in the future:

* [ ] Writing to File: The `w` Module

* [ ] Scripting with Radare2

* [ ] Remote Connections

* [ ] Radare2 Plugins

* [ ] Complete the Radare2 Suite (rasm2, radiff2, ...)