radare2

Overview

radare2 (r2) is a CLI reverse engineering framework. Disassembly, debugging, binary patching, and scripting with r2pipe.

Steeper learning curve than Ghidra but scriptable and lightweight for quick shellcode analysis.

Primary use cases

• Quick binary triage on SSH servers
• CTF shellcode debugging

Key commands

r2 -A binary.elf

Related tools

• Ghidra — Reverse engineering IDE. Disassembly, decompilation, scripting, and binary diffing.
• binwalk — Firmware analysis. Extracts embedded files and filesystems from binary blobs.