radare2 is a command-line hexadecimal editor.
"r2" is the alias program name for radare2.
This manpage is not updated yet. Feel free to contribute.
The options are:
-- Open radare2 on an empty file
- Equivalent of 'r2 malloc://512'
-0 Print \x00 after initialization and after every command executed
-1 Redirect stderr to stdout
-2 Close stderr before starting RCore
-aarch force asm.arch (x86, ppc, arm, mips, bf, java, ...)
-A run 'aaa' command before prompt or patch to analyze all referenced code. Use -AA to run aaaa
-bbits force asm.bits (16, 32, 64)
-Bbaddr Specify the base address to be used when loading a new binary. See 'e?bin.baddr'
-ccmd Execute the given command before giving prompt
-d Start in debugger mode
-Ddbg.backend
Enable debug mode. Set cfg.debug=true
-ek=v Set configuration eval variable key=value. For example -e scr.color=false. When -e is passed
after -j, it will set the script source to run instead of setting eval vars.
-f Blocksize = file size
-j Run QJS script if an argument is passed or enter the qjs shell if no file is specified. You
can evaluate expressions when passing the -e flag after the -j.
-ifile Run script file. After the file is loaded
-Ifile Run script file. Before the file is loaded
-kkernel Select kernel (asm.os) for syscall resolution
-lplugfile
Load given plugin file
-L List loaded IO plugins.
-LL List loaded core plugins.
-maddr map file at given address
-M Disable demangling
-n Do not perform any analysis (r_bin). Just load the raw file
-nn Only load the rbin structures (elf, mach0, ...)
-N Do not load user settings/projects from ~/.radare2rc, ~/.config/radare2/radare2rc and the
scripts inside .../radare2rc.d/ directory.
-NN Same as -N but also disables the automatic loading of plugins on startup time
-q Quiet mode (no prompt) and quit after running the commands specified with -i or -c
-qq Quit before showing the prompt. Right after all the -e -c and -i arguments are evaluated.
-Q Same as q, but exiting without freeing RCore, this produces leaks at exit time, but saves
some precious ms to run the testsuite in fast mode.
-pprj Set project file
-Pfile Apply rapatch file and quit (see doc/rapatch.md for more details)
-rrarun2 Specify dbg.profile rarun2 profile to use when spawning a program for debugging
-Rrarun2-directive
Specify custom rarun2 directives without having to create a rarun2 profile
-saddr Start seeking at this address
-S Enable sandboxed mode (same as -e cfg.sandbox=true)
-t Get binary information and analyze binary in a background thread
-T Avoid computing the file hashes
-u Set bin.filter=false to load rbin info without filtering names
-v Show version information and exit (Use -qv to get just the version number)
-V Show radare2 library versions (prints JSON format if -j is used)
-w Open in write mode
-h Show help message
-H Show files and environment help
-x Open the file map without executable permissions
-X Same as -e bin.usextr=false, do not use extract plugins, useful for dyldcache