reverse-skills-max/reverse-skill-repo/skills/radare2/references/cheatsheet.md

radare2 速查表

基础侦察

rabin2 -I sample.exe
rabin2 -S sample.exe
rabin2 -i sample.exe
rabin2 -E sample.exe
rabin2 -zz sample.exe

进入交互

r2 sample.exe

aaa
afl
iz
iS
is
s entry0
pdf
q

字符串和引用

iz~http
iz~error
axt <addr>
s <addr>
pdf

常用查看

px 64
pd 20
psz
pxa

patch

r2 -w sample.exe

s 0x401000
wa nop
wx 9090
wq

非交互模式

r2 -A -q -c "afl;iz;ii;q" sample.exe

其他工具

rasm2

rasm2 -d "9090"
rasm2 -a x86 -b 64 "xor eax, eax"

radiff2

radiff2 old.exe new.exe
radiff2 -C old.exe new.exe

rahash2

rahash2 -a md5 sample.exe
rahash2 -a sha256 sample.exe

rax2

rax2 0x401000
rax2 4198400
rax2 -s hello