whatisgithub

What is radare2?

officialcjunior/radare2 — explained in plain English

Analysis updated 2026-08-03 · repo last pushed 2021-02-23

1CAudience · researcherComplexity · 4/5DormantSetup · moderate

In one sentence

Radare2 is a free, open-source reverse engineering toolkit that lets you take compiled programs apart to understand how they work, even without the original source code. It supports nearly every processor architecture and file format imaginable.

Mindmap

mindmap
  root((repo))
    What it does
      Disassemble machine code
      Debug running programs
      Edit hex bytes
      Inspect binaries
    Tech stack
      C
      Python
      Ruby
      Go Rust
    Use cases
      Malware analysis
      Vulnerability research
      Firmware reverse engineering
      Capture the flag
    Audience
      Security researchers
      Hobbyists
      Security educators
    Platform support
      Windows macOS
      Linux BSD
      Haiku Solaris

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Analyze a suspicious malware file to figure out what it does without running it.

USE CASE 2

Find security vulnerabilities in compiled software by stepping through its instructions.

USE CASE 3

Reverse engineer firmware from routers or IoT devices to understand their internals.

USE CASE 4

Solve reverse engineering challenges in capture-the-flag security competitions.

What is it built with?

CPythonRubyJavaScriptGoRust

How does it compare?

officialcjunior/radare2abrown/aomadroxz1122/injected-host-enumeration
Stars111
LanguageCCC
Last pushed2021-02-232020-03-11
MaintenanceDormantDormant
Setup difficultymoderatehardmoderate
Complexity4/55/53/5
Audienceresearcherdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

Needs to be compiled from source or installed via a package manager, and command-line reverse engineering concepts require some learning.

Free and open-source software that can be used for any purpose including commercial use, with the source code freely available for modification and redistribution.

So what is it?

Radare2 is a free, open-source toolkit for reverse engineering, which means taking a compiled program apart to understand how it works, even when you don't have the original source code. Security researchers, malware analysts, and hobbyists use it to inspect binaries, debug running programs, disassemble machine code into human-readable instructions, and edit files at the raw hexadecimal level. It started as a scriptable command-line hex editor for forensics work and grew into a full-featured framework. At its core, it's a command-line tool written in C that lets you open almost any kind of binary file, Windows executables, macOS apps, Android packages, firmware images, even Game Boy ROMs, and analyze what's inside. You can step through a program's instructions one at a time, examine memory, search for patterns, patch bytes, and follow program logic. It supports an enormous range of processor architectures (x86, ARM, MIPS, RISC-V, and dozens more) and file formats, making it unusually versatile compared to most tools in this space. The people who reach for this tool are typically doing malware analysis (figuring out what a suspicious file does), vulnerability research (finding bugs in compiled software), or firmware reverse engineering (understanding embedded devices like routers and IoT hardware). It's also popular among capture-the-flag competitors and security educators. If you've ever wanted to know what happens inside a program after it's compiled, this is the kind of tool you'd reach for. A few things stand out about how the project works. It has its own package manager (r2pm) for installing plugins and extensions, and it can be scripted from a wide variety of languages including Python, Ruby, JavaScript, Go, and Rust, so you can automate analysis workflows. The project runs on nearly every operating system you can name, from Windows and macOS to Haiku and Solaris. It's a from-scratch rewrite of an earlier tool called radare, built as a set of reusable libraries and command-line tools rather than a single monolithic application.

Copy-paste prompts

Prompt 1
How do I use radare2 to open a Windows executable and disassemble it to see the assembly instructions?
Prompt 2
Show me how to use radare2 to patch specific bytes in a binary file at a given hex offset.
Prompt 3
How do I script radare2 with Python to automate analyzing multiple binary files for specific patterns?
Prompt 4
How do I use radare2 to debug a running program and step through its instructions one at a time?
Prompt 5
How do I install radare2 plugins using the r2pm package manager?

Frequently asked questions

What is radare2?

Radare2 is a free, open-source reverse engineering toolkit that lets you take compiled programs apart to understand how they work, even without the original source code. It supports nearly every processor architecture and file format imaginable.

What language is radare2 written in?

Mainly C. The stack also includes C, Python, Ruby.

Is radare2 actively maintained?

Dormant — no commits in 2+ years (last push 2021-02-23).

What license does radare2 use?

Free and open-source software that can be used for any purpose including commercial use, with the source code freely available for modification and redistribution.

How hard is radare2 to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is radare2 for?

Mainly researcher.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.