NAME¶
rabin2 —
Binary program info
extractor
SYNOPSIS¶
| rabin2 |
[-ACeisSMzIHlRrvLxVh]
[-a arch]
[-b bits]
[-B addr]
[-c
fmt:C:[D]]
[-p
patchfile]
[-f
subbin]
[-O str]
[-o str]
[-m addr]
[-@ addr]
[-n str]
file |
DESCRIPTION¶
This program allows you to get information about ELF/PE/MZ and CLASS files in a
simple way.
- -A
- List archs
- -a
arch
- Set arch (x86, arm, .. accepts underscore for bits
x86_32)
- -b
bits
- Set bits (32, 64, ...)
- -B
addr
- Override baddr
- -c
[fmt:C[:D]]
- Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries
where 'C' is an hexpair list of the code bytes and ':D' is an optional
concatenation to describe the bytes for the data section.
- -C
- List classes
- -p
patchfile
- Patch file (see man rabin2)
- -e
- Show entrypoints for disk and on-memory
- -f
subbin
- Select sub-binary architecture. Useful for fat-mach0
binaries
- -i
- Show imports (symbols imported from libraries)
- -s
- Show exported symbols
- -S
- Show sections
- -M
- Show address of 'main' symbol
- -z
- Show strings inside .data section (like gnu strings
does)
- -I
- Show binary info
- -I
- Show header fields
- -l
- List linked libraries to the binary
- -I
- Show realocations
- -O
str
- Write/extract operations (-O help)
- -o
str
- Output file/folder for write operations (out by
default)
- -r
- Show output in radare format
- -v
- Display virtual addressing offsets
- -m
addr
- Show source line reference from a given address
- -L
- List supported bin plugins
- -@
addr
- Show information (symbol, section, import) of the given
address
- -n
str
- Show information (symbol, section, import) at string
offset
- -x
- Extract all sub binaries from a fat binary (f.ex:
fatmach0)
- -V
- Show version information
- -h
- Show usage help message.
SEE ALSO¶
rahash2(1),
rafind2(1),
radare2(1),
radiff2(1),
ranal2(1),
rasm2(1),
rax2(1),
rsc2(1),
ragg2(1),
rarun2(1),
AUTHORS¶
pancake <pancake@nopcode.org>, nibble <nibble@develsec.org>
