Contents
What can radare2 be used for in reverse engineering?
Radare2 is an open-source framework that can perform disassembly, debugging, analysis, comparing data and manipulation of binary files. This framework works on Windows, Linux and many other platforms and architectures. The Windows installer can be downloaded from GitHub.
How is reverse engineering used in the security industry?
It is the process by which software is deconstructed in a way that reveals its innermost details such as its structure, function and operation. Reverse-engineering is one of the core skills required in the software security industry.
How is the s command used in radare2?
The “s” command in radare2 is used to “search” for data within the code. As shown in Figure 8, it is used to search for the key “password” within the code. Note that the address changes from the entry point 0x00401500 to the address where the key is found: 0x00488019.
How to examine a memory address in radare2 using registers?
How can I examine a memory address in radare2 using registers? I would like to achive what this command does in gdb: x/s $ebp+0x4
Can you use exe.r2 instead of radare2?
The basic usage is radare2 exe (on some systems you can use simply r2 instead of radare2). If there exists a script named exe.r2, then it gets executed after the others rc-files.
Can You reverse engineer a Gameboy ROM with radare2?
It is not the first writeup that I publish from r2con competition, you can check out “Reverse engineering a Gameboy ROM with radare2” as well, make sure not to miss the cool swags I got from winning the competition. This article is aimed to those of you who are familiar with radare2.
Can you run radare2 with the-a flag?
You can also run radare2 with the -A flag to analyze the binary straight at startup using aaa (e.g r2 -A ./packedup ). Note: as I mentioned in the previous posts, starting with aaa is not always the recommended approach since analysis is very complicated process.