radare2 commands
command Args
-d – start in debug mode
-A – Auto aaa
-a arm -m 0x0800C000 -b 16
-m [addr] – map file at given address (loadaddr)
-i load script
Radare2 – aldeid
Project Managment
P – list projects
Ps <filename> – Save to filename
shell commands
aaa – analyse all
afl – command (Analyze Functions List).
s <function> – seek to function or any memory address
axt @@ str.* – find usage of strings
ood – Open binary in debugger
?[??][expr] – Help or evaluate math expression
s..[addr] – seek to lower part of address
Set parameters
e var=? will list possible options
e asm.arch – ASM achitecture arm
e asm.bits – Processor bits 8.16.32.64 etc
Change Data Type
Cs [len] – set current address and length to string
Cd [len] – set current address and length to data
C- [len] – set current address and length to code
Cf [len] – set current address and length to struct
Comments
CC – Add comment at current location
CC- – Remove Comment
CCu <comments> @ <Address> – Add comments a specified address
change data type (Hint)
ahi s – set specific offset as string
ahi s @0x080485a3 set single address to string
ahi s @@=0x080485a3 0x080485ad 0x080485b7 – sets multiple memory addresses strings @@ is an integrator place holder
rename function
s fcn.00401510
afn better_name
Or by using
afn better_name fcn.00401510
afn better_name 0x00401510
afn better_name @fcn.00401510
afn better_name @0x00401510
variables
afvn [identifier] [new_name]
afvt [name] [new_type] change type for given argument/local
afvd print local variables (debug mode)
pdf – print disassemble function
ps – print string, EX: ps @ 0x02ee
@is a temporary seek
pdc– print C pseudo code
flags
fs – To list the flag spaces
fs <flagspace>; f – show specific flag space
searching
pd 0xdff ~0xc6
rabin2 – binary info
i? – Commands related to rabin2, information about the binary
iz – List strings in data sections
izz – Search for Strings in the whole binary
Visual mode
V – visual mode from r2 or switch to Graph in Visual Mode
j / k – move forward or back
p / P – switch between visual modes
<enter> – jump / call to go to location
:<r2 command> – run radare2 command in visual mode
;[-]comment – add or [-] remove comment
Visual Graph
VV – visual graph
:<r2 command> – run radare2 command in visual mode
v – visual code review
p / P – switch between visual graphs
R – change colors
;[-]comment – add or [-] remove comment
? – show commands
TAB – Jump to next function
t – Jump to true branch
f – Jump to false branch
Misc
/V4 0x40000000 0x4000f000 find perperal between those address ranges
~ – Grep
? – at end count of hits on search
$$ – current offeset
/v – find dwords
/r – find refs
radare2/intro.md at master · radare/radare2 · GitHub
A journey into Radare 2 – Part 1: Simple crackme – Megabeets
A journey into Radare 2 – Part 2: Exploitation – Megabeets
Reverse Engineering With Radare2 – Intro – Insinuator.net
Reverse Engineering With Radare2 – Part 2 – Insinuator.net
Reverse Engineering With Radare2 – Part 3 – Insinuator.net
Radare2 cheat Sheet – { Anas Aboureada }
