Questions tagged [radare2]

Opensource reverse engineering framework to disassemble, debug, analyze, manipulate binary files and more.

Filter by
Sorted by
Tagged with
2
votes
2answers
2k views

Static analysis of Windows executable from a Linux platform

I am trying to do some static analysis on crackmes written for Windows on a Linux platform. I am using radare2. My problem is that most of the time I am unable to find the "real" code, for example the ...
1
vote
1answer
572 views

Interpreting variable names in radare2

I am reversing an ELF executable, and got the following: 0x080480ab b880800408 movl $entry0, %eax ; eip 0x080480b0 bb23810408 movl $section_end.LOAD0, %ebx ; section_end....
0
votes
1answer
1k views

radare2 does not show reference to memory address

I am debugging Challenge 6 from the 2014 FlareOn challenges. For incorrect imput it displays the "bad" message. Running /i bad returns 0x004f3bf2 hit0_0 "bad". ps @ 0x004f3bf2 returns bad as expected. ...
5
votes
2answers
3k views

Radare2 forwarding input to scanf from a file

I'm debugging a file with radare2 and when I come to scanf function I want to forward input from a .txt file. In gdb I would do this by typing r < text.txt. Is something like that possible in ...
3
votes
1answer
613 views

Examining memory in radare2 using registers

I can inspect esp in radar2 using dr esp. In order to inspect 0x15(%esp) I do the following: dr esp 0xff966c60 ? 0xff966c60 + 0x15 0xff966c75 px 4 @ 0xff966c75 Is there an easier way to ...
1
vote
2answers
6k views

How to print from pointers in radare2 in debug session

when I am using the radare2 debugger, it happens that I have sometimes to examine variables and memory. Consider the following instruction 0x08048498 8b4508 mov eax, dword [ebp+arg2] ...
3
votes
1answer
913 views

Changing code to data in radare2

I really like radare2 and I am trying to follow a tutorial in which some code is changed to data. The tutorial uses IDA, I have tryed this with radare2. I entered visual mode by pressing V and cursor ...
3
votes
1answer
430 views

Radare2 and Boomerang

I found this post stating that Radare can work with Boomerang. However when I try do exactly as they say, I get the following error: sh: 1: rsc: not found. From what I can see, rsc is an extra utility ...
5
votes
2answers
3k views

Method disassembly of Objective C Mach-O with Radare 2

Is is possible to retrieve the dissassembly of Objective-C methods declared in Mach-O files using Radare 2 ?
6
votes
3answers
2k views

Debugging forked child in an anti-debug protected crackme

I am interested in the anti-debugging method implemented in the crackme called trace-p. A child process is forked, which communicates with the parent using int3 instructions. I would like to debug the ...
2
votes
2answers
1k views

Help with IOLI crackme0x02

I am studying IOLI crackme0x02. It is clear to me that rewriting the jump at 0x8048451 with no instructions the crackme can be patched. However, I want to understand better what the code does. My ...
11
votes
2answers
23k views

Find reference to string in radare2

In this crackme solution first the strings are found: $ rabin2 -z crackserial_linux addr=0x00000aa0 off=0x00000aa0 ordinal=000 sz=7 len=7 section=.rodata type=A string=User: addr=0x00000aa7 off=...
3
votes
1answer
2k views

Demangle c++ functions in radare2

I am learning radare2. Is there a way to demangle c++ functions during disassembling? For example in gdb set print asm-demangle changes callq 0x400a30 <_ZNSo3putEc@plt> to callq 0x400a30 &...
4
votes
3answers
9k views

Examining memory in radare2

How can I examine a memory address in radare2 using registers? I would like to achive what this command does in gdb: x/s $ebp+0x4
1
vote
1answer
3k views

How to debug with remote binaries radare2?

i am reading differents documentation about radare2 but i don't read nothing about how can i debug a binary in remote machine. Actually i am a security research and i need execute binaries in other ...
6
votes
1answer
21k views

How to debug (like gdb) with radare2?

I am new to radare2 and Linux. I got problem with r2. As the title states it, many tutorials, articles, videos about r2 are just about disassembling programs, and read assembly codes. But, I want ...
2
votes
1answer
227 views

Disassembling output of searches radare2

[0x00402079]> / valid Searching 5 bytes from 0x00401000 to 0x0040561e: 76 61 6c 69 64 # 3 [0x401000-0x40561e] hits: 5 0x00401695 hit6_0 "valid" 0x00401fca hit6_1 "valid" 0x00402095 hit6_2 "valid" ...
5
votes
3answers
749 views

Any documentation available for r2 other than official book

I am interested in learning and using radare2 as a toolset for reverse engineering. But I want ANY other resource for learning this tools other than radare2 book, preferably a video series. What I am ...
1
vote
1answer
142 views

Radare2 windows unwanted lines during debugging

I'm learning how to work with radare2 tool. While I am stepping through the program (on windows7) radare2 prints some lines which can be seen on the picture. It seems to me as if the tracing is ...
1
vote
1answer
967 views

AT&T XOR argument at radare2

Recently I faced with strange (in my opinion) behavior of radare2. I have been reading the Artificial truth blog post about Hacking bits with this crackme. In an article Julien used Intel syntax, ...
9
votes
2answers
9k views

How do you can you disassemble and dump an entire binary?

It's easy to seek to a particular function and dump it's contents as Assembly language. However, I cannot find an obvious way to immediately disassemble and dump an entire binary. I want to use it ...
7
votes
1answer
5k views

Recursive traversal disassembling with Radare2?

I am trying the recursive traversal disassembler of the radare2 tool. But, I cannot use it properly. First, according to the radare2 manual, we can use recursive traversal disassembler by using the ...
6
votes
1answer
3k views

Disassembling an unknown DOS MZ executable using radare2

How do I specify to radare2 that what I'm disassembling when I know it is a DOS MZ executable? As it does not auto-detect this for me.
4
votes
1answer
4k views

Getting to the entry point using radare2

How do I get to the entry point of a .exe file using radare2? I tried using aa then pdf@sym.main, but a prompt showed saying "Cannot find function at 0x00000000"
4
votes
1answer
4k views

How to reverse CGI file for MIPS?

I'm trying to load a CGI file to IDA in order to disassemble it and understand it's behaviour but I can't do it. According to the strings command I can see some interesting words like system, sprintf,...
11
votes
2answers
2k views

Encrypted Mach-o binary cannot be disassembled/traced with GDB

I'm trying to analyze an encrypted Mach-O binary (non-iPhone one), and I am observing the following strange behaviors: when I load this binary into GDB and try to disassemble the code at the address ...
10
votes
1answer
3k views

What are the main features of radare2?

Radare2 is a framework for reverse-engineering gathering several tools (see this Phrack article about radare1 to know a bit more about the framework). I would like to know if someone could point out ...

1 2 3 4 5
6