SYNOPSIS
rabin2 [-ACeigsSMzIHlRrLxvVh [-a arch ] ] [-b bits ] [-B addr ] [-c fmt:C:[D] ] [-f subbin ] [-O str ] [-o str ] [-m addr ] [-@ addr ] [-n str ] fileDESCRIPTION
This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.- -A
- List archs
- -a arch
- Set arch (x86, arm, .. accepts underscore for bits x86_32)
- -b bits
- Set bits (32, 64, ...)
- -B addr
- Override baddr
- -c [fmt:C[:D]]
- Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an hexpair list of the code bytes and ':D' is an optional concatenation to describe the bytes for the data section.
- -C
- List classes
- -e
- Show entrypoints for disk and on-memory
- -f subbin
- Select sub-binary architecture. Useful for fat-mach0 binaries
- -g
- Same as -SMRevsiz (Show all possible information). See -r
- -i
- Show imports (symbols imported from libraries)
- -s
- Show exported symbols
- -S
- Show sections
- -M
- Show address of 'main' symbol
- -z
- Show strings inside .data section (like gnu strings does)
- -I
- Show binary info
- -H
- Show header fields
- -l
- List linked libraries to the binary
- -R
- Show realocations
- -O str
- Write/extract operations (-O help)
- -o str
- Output file/folder for write operations (out by default)
- -r
- Show output in radare format
- -v
- Display virtual addressing offsets
- -m addr
- Show source line reference from a given address
- -L
- List supported bin plugins
- -@ addr
- Show information (symbol, section, import) of the given address
- -n str
- Show information (symbol, section, import) at string offset
- -x
- Extract all sub binaries from a fat binary (f.ex: fatmach0)
- -V
- Show version information
- -h
- Show usage help message.
EXAMPLES
List symbols of a program
$ rabin2 -s a.out
Get offset of symbol
$ rabin2 -n _main a.out
Get entrypoint
$ rabin2 -e a.out
Load symbols and imports from radare
.!rabin2 -vrsi a.out