98 lines
885 B
Markdown
98 lines
885 B
Markdown
# radare2 速查表
|
|
|
|
## 基础侦察
|
|
|
|
```powershell
|
|
rabin2 -I sample.exe
|
|
rabin2 -S sample.exe
|
|
rabin2 -i sample.exe
|
|
rabin2 -E sample.exe
|
|
rabin2 -zz sample.exe
|
|
```
|
|
|
|
## 进入交互
|
|
|
|
```powershell
|
|
r2 sample.exe
|
|
```
|
|
|
|
```text
|
|
aaa
|
|
afl
|
|
iz
|
|
iS
|
|
is
|
|
s entry0
|
|
pdf
|
|
q
|
|
```
|
|
|
|
## 字符串和引用
|
|
|
|
```text
|
|
iz~http
|
|
iz~error
|
|
axt <addr>
|
|
s <addr>
|
|
pdf
|
|
```
|
|
|
|
## 常用查看
|
|
|
|
```text
|
|
px 64
|
|
pd 20
|
|
psz
|
|
pxa
|
|
```
|
|
|
|
## patch
|
|
|
|
```powershell
|
|
r2 -w sample.exe
|
|
```
|
|
|
|
```text
|
|
s 0x401000
|
|
wa nop
|
|
wx 9090
|
|
wq
|
|
```
|
|
|
|
## 非交互模式
|
|
|
|
```powershell
|
|
r2 -A -q -c "afl;iz;ii;q" sample.exe
|
|
```
|
|
|
|
## 其他工具
|
|
|
|
### rasm2
|
|
|
|
```powershell
|
|
rasm2 -d "9090"
|
|
rasm2 -a x86 -b 64 "xor eax, eax"
|
|
```
|
|
|
|
### radiff2
|
|
|
|
```powershell
|
|
radiff2 old.exe new.exe
|
|
radiff2 -C old.exe new.exe
|
|
```
|
|
|
|
### rahash2
|
|
|
|
```powershell
|
|
rahash2 -a md5 sample.exe
|
|
rahash2 -a sha256 sample.exe
|
|
```
|
|
|
|
### rax2
|
|
|
|
```powershell
|
|
rax2 0x401000
|
|
rax2 4198400
|
|
rax2 -s hello
|
|
```
|