rabin2(1) Binary program info extractor

SYNOPSIS

rabin2 [-ACeigsSMzIHlRrLxvVh [-a arch ] ] [-b bits ] [-B addr ] [-c fmt:C:[D] ] [-f subbin ] [-O str ] [-o str ] [-m addr ] [-@ addr ] [-n str ] file

DESCRIPTION

This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.

-A
List archs
-a arch
Set arch (x86, arm, .. accepts underscore for bits x86_32)
-b bits
Set bits (32, 64, ...)
-B addr
Override baddr
-c [fmt:C[:D]]
Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an hexpair list of the code bytes and ':D' is an optional concatenation to describe the bytes for the data section.
-C
List classes
-e
Show entrypoints for disk and on-memory
-f subbin
Select sub-binary architecture. Useful for fat-mach0 binaries
-g
Same as -SMRevsiz (Show all possible information). See -r
-i
Show imports (symbols imported from libraries)
-s
Show exported symbols
-S
Show sections
-M
Show address of 'main' symbol
-z
Show strings inside .data section (like gnu strings does)
-I
Show binary info
-H
Show header fields
-l
List linked libraries to the binary
-R
Show realocations
-O str
Write/extract operations (-O help)
-o str
Output file/folder for write operations (out by default)
-r
Show output in radare format
-v
Display virtual addressing offsets
-m addr
Show source line reference from a given address
-L
List supported bin plugins
[email protected] addr
Show information (symbol, section, import) of the given address
-n str
Show information (symbol, section, import) at string offset
-x
Extract all sub binaries from a fat binary (f.ex: fatmach0)
-V
Show version information
-h
Show usage help message.

EXAMPLES

List symbols of a program


  $ rabin2 -s a.out

Get offset of symbol


  $ rabin2 -n _main a.out

Get entrypoint


  $ rabin2 -e a.out

Load symbols and imports from radare


  .!rabin2 -vrsi a.out

AUTHORS

Written by pancake <[email protected]> and nibble <[email protected]>.