radare2 - UNIX-like reverse engineering framework and comman

项目说明

<a href=" border=0 src="doc/images/r2emoji.png" alt="screenshot" align="left" width="128px"></a>

Radare2: Libre Re Framework for Unix Geeks

![Tests Status]() ![build]() ![tcc]()
![CII Best Practices]() ![Build Status]() ![Discord]()

Current git master branch is 6.2.3, next release will be 6.2.4.

Description

r2 is a complete rewrite of radare. It provides a set of libraries, tools and
plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite
each plugin can ha licenses (see r2 -Lj for details)

The radare project started as a simple command-line hexadecimal editor
focused on forensics. Today, r2 is a full-featured low-le tool
with support for scripting with the embedded Ja interpreter or .

r2 can edit files on local hard drives, view kernel memory, and debug programs
locally or via a remote gdb/windbg servers. r2's wide architecture support allows
you to analyze, emulate, debug, modify, and disassemble any binary.

<p align="center">
<a href=" src="doc/images/shot.png" alt="screenshot" align="center" border=0 width="600px"></a>
</p>

Installation

Download the last released binaries.

The recommended way to install radare2 is from Git repository source:

* Run sys/install.sh for the default acr+make+symlink installation
* meson/ninja (muon/samu also works) and make builds are supported.

Nix

radare2 provides Nix packaging under dist/nix.

Source Build

* r2 can be installed from git or via pip using r2env.
* Windows builds require meson and msvc or mingw as compilers
* To uninstall the current build of r2 run make uninstall
* To uninstall ALL the system installations of r2 do: sudo make purge

On Windows use the .bat scripts and msvc:

Popular Plugins:

Using the r2pm tool you can browse and install many plugins and tools that use radare2.

* iaito: The official Qt graphical interface
* keystone Assembler instructions using the Keystone library
* decai Decompiler based on AI
* r2ai Run a Language Model in localhost with Llama inside r2!
* r2dec: A decompiler based on r2 written in JS, accessed with the pdd command
* r2diaphora: Diaphora's binary diffing engine on top of radare2
* r2flutter: Dart/Flutter AOT snapshot analysis for Android and iOS apps
* r2frida: The frida io plugin. Start r2 with r2 frida://0 to use it
* r2ghidra: The standalone nati decompiler accessible with pdg
* r4ghidra: Feel the radare joy inside your Ghidra
* r2papi High level api on top of r2pipe
* r2pipe Script radare2 from any programming language
* r2poke Integration with GNU/Poke for extended binary parsing capabilities
* goresym: Import GoReSym symbol as flags
* r2yara Run Yara from r2 or use r2 primitives from Yara
* radius2: A fast symbolic execution engine based on boolector and esil
* r2sarif import/extend/export SARIF documents
* r2hermes Disassembler and analyzer for React Nati bytecode
* r2renef Renef IO Plugin for Radare2 - Dynamic Android Instrumentation
* r2unity: Inspect Unity IL2CPP metadata and nati from radare2
* warrp Nati plugin for the binary ninja's WARP format

Usage

These are the first steps to use r2, read the book or find tutorials for more details

Many plugins are included in r2 by default. But you can extend its capabilities
by using the r2pm package manager.

Resources

* Official Book: Read about r2 usage
* COMMUNITY.md: Community engagement and loose guidelines
* CONTRIBUTING.md: Information about reporting issues and
contributing. See also Contributing
* DE.md: De guidelines for r2
* SECURITY.md: Instructions for reporting
* USAGE.md: Some example commands
* INSTALL.md: Installation instructions using make or meson

Documentation

Learn more about r2 watching youtube talks from r2con. There are also many blogposts, slidedecks and the official radare2 book, but it's always a good idea to join any of the official chats and drop your questions or feedback there.

Community

* Website:
* Discord: Server
* Mastodon:
* Main and Side channels
* irc.libera.chat: #radare, #radare_side
* Matrix: #radare:matrix.org

Supported Platforms

Operating Systems

Windows (since XP for x86/x64/arm64), Linux, Darwin, GNU/Hurd, Apple's {Mac,i,iPad,watch}OS,
Android, Wasmer, [Dragonfly, Net, Free, Open] BSD, Z/OS, QNX, SerenityOS, Solaris, AIX,
Haiku, Vinix, FirefoxOS.

Architectures

i386, x86-64, Alpha, ARM, AVR, BPF, sBPF, MIPS, PowerPC, SPARC, RISC-V, SH, m68k,
S390, XCore, CR16, HPPA, ARC, Blackfin, Z80, H8/300, V810, PDP11, m680x, V850,
CRIS, XAP (CSR), PIC, LM32, 8051, 6502, i4004, i8080, Propeller, EVM, OR1K
Tricore, CHIP-8, LH5801, T8200, GameBoy, SNES, SPC700, MSP430, Xtensa, xcore,
NIOS II, Ja, Pickle, WebAssembly, MSIL, EBC, TMS320 (c54x, c55x,
c55+, c64x), Hexagon, Brainfuck, Malbolge, whitespace, DCPU16, LANAI, lm32,
MSIL, InfernoDis, UXN, Cosmac, PythonBytecode, Sharp sm5xx MCPus, FreeScale QIQa,
MCORE, mcs96, RSP, SuperH-4, VAX, K, LOONGARCH, JDH8, s390x, STM8.

File Formats

ELF, Mach-O, Fatmach-O, PE, PE+, MZ, COFF, XCOFF, OMF, TE, XBE, SEP64, BIOS/UEFI, BFLT, Pebble apps,
Apple Dyldcache, Kernelcache, MCLF trustlets, DEX, ART, Ja, Android boot image, Plan9 executables, Amiga HUNK,
ZIMG, MBN/SBL bootloader, ELF coredump, MDMP (Windows minidump), PDP11, XTAC, CGC, DotNet,
WASM (WebAssembly binary), Commodore VICE emulator, DOL, QNX, WAD, OFF, TIC-80,
GB/GBA, PSX, PRG (C64), Apple Classic PEF, NDS, z64, and N3DS
...

FileSystems

Mount in userland several filesystems like NTFS, FAT, HFS+, EXT, APFS, BeosFS, BFS, MINIX, ReiserFS, SFS, ubifs, ufs, jfs, ISO9660, UDF, xfs

Packaging Status

* ![Snap package]()
* ![Termux package]()
* ![Alpine Linux 3.23 package]() ![Alpine Linux 3.22 package]()
* ![Arch package]()
* ![Fedora 42]() ![Fedora 41]()
* ![Homebrew package]() ![MacPorts package]()
* ![Haiku Ports]() ![Void Linux]()

项目信息

开发语言：C

Star 数：24928

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕UNIX-like reverse engineering framework and command-line toolset展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。