RABIN2(1)

NAME
RABIN2 - Binary program info extractor

SYNOPSIS
rabin2 [-ACeghHiIsSMzlpRrLxvh] [-a arch] [-b bits] [-B addr] [-c fmt:C:[D]] [-D lang] [-f subbin] [-k query] [-K algo] [-O str] [-o str] [-m addr] [-@ addr] [-n str] file

DESCRIPTION
This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.

-@ addr
    Show information (symbol, section, import) of the given address

-A  List archs

-a arch
    Set arch (x86, arm, .. accepts underscore for bits x86_32)

-b bits
    Set bits (32, 64, ...)

-B addr
    Override baddr

-c [fmt:C[:D]]
    Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an hexpair list of the code bytes and ':D' is an optional concatenation to describe the bytes for the data section.

-C  List classes

-d  Show debug/dwarf information

-D lang symbolname
    Demangle symbol name for lang

-e  Show entrypoints for disk and on-memory

-f subbin
    Select sub-binary architecture. Useful for fat-mach0 binaries

-g  Show all possible information

-h  Show usage help message.

-H  Show header fields

-I  Show binary info

-i  Show imports (symbols imported from libraries)

-j  Output in json

-k query
    Perform SDB query on loaded file

-K algo
    Select a rahash2 checksum algorithm to be performed on sections listing (and maybe others in the future) i.e 'rabin2 -K md5 -S /bin/ls'

-l  List linked libraries to the binary

-L  List supported bin plugins

-M  Show address of 'main' symbol

-m addr
    Show source line reference from a given address

-N minlen:maxlen
    Force minimum and maximum number of chars per string (see -z and -zz). if (strlen>minlen && (!maxlen || strlen<=maxlen))

-n str
    Show information (symbol, section, import) at string offset

-o str
    Output file/folder for write operations (out by default)

-O str
    Write/extract operations (-O help)

-p  Disable VA. Show physical addresses

-q  Be quiet, just show fewer data

-R  Show realocations

-r  Show output in radare format

-s  Show exported symbols

-S  Show sections

-v  Show version information

-x  Extract all sub binaries from a fat binary (f.ex: fatmach0)

-z  Show strings inside .data section (like gnu strings does)

-Z  Guess size of binary program

-zz Shows strings from raw bins

EXAMPLES

List symbols of a program

$ rabin2 -s a.out

Get offset of symbol

$ rabin2 -n _main a.out

Get entrypoint

$ rabin2 -e a.out

Load symbols and imports from radare2

$ r2 -n /bin/ls [0x00000000]> .!rabin2 -prsi $FILE

SEE ALSO

rahash2(1), rafind2(1), radare2(1), radiff2(1), rasm2(1), rax2(1), rsc2(1), ragg2(1), rarun2(1),

AUTHORS

Written by pancake <pancake@nopcode.org>.