rabin2 - Online in the Cloud

PROGRAM:

NAME

rabin2 - Binary program info extractor

SYNOPSIS

rabin2 [-ACeigsSMzIHlRrLxvVh] [-a arch] [-b bits] [-B addr] [-c fmt:C:[D]] [-f subbin]
[-O str] [-o str] [-m addr] [-@ addr] [-n str] file

DESCRIPTION

This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.

-A List archs

-a arch Set arch (x86, arm, .. accepts underscore for bits x86_32)

-b bits Set bits (32, 64, ...)

-B addr Override baddr

-c [fmt:C[:D]]
Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an
hexpair list of the code bytes and ':D' is an optional concatenation to describe
the bytes for the data section.

-C List classes

-e Show entrypoints for disk and on-memory

-f subbin Select sub-binary architecture. Useful for fat-mach0 binaries

-g Same as -SMRevsiz (Show all possible information). See -r

-i Show imports (symbols imported from libraries)

-s Show exported symbols

-S Show sections

-M Show address of 'main' symbol

-z Show strings inside .data section (like gnu strings does)

-I Show binary info

-H Show header fields

-l List linked libraries to the binary

-R Show realocations

-O str Write/extract operations (-O help)

-o str Output file/folder for write operations (out by default)

-r Show output in radare format

-v Display virtual addressing offsets

-m addr Show source line reference from a given address

-L List supported bin plugins

-@ addr Show information (symbol, section, import) of the given address

-n str Show information (symbol, section, import) at string offset

-x Extract all sub binaries from a fat binary (f.ex: fatmach0)

-V Show version information

-h Show usage help message.

EXAMPLES

List symbols of a program

$ rabin2 -s a.out

Get offset of symbol

$ rabin2 -n _main a.out

Get entrypoint

$ rabin2 -e a.out

Load symbols and imports from radare

.!rabin2 -vrsi a.out

Use rabin2 online using onworks.net services