rabin2 - Binary program info extractor

SYNOPSIS
rabin2 [-ACeigsSMzIHlRrLxvVh] [-a arch] [-b bits] [-B addr] [-c fmt:C:[D]] [-f subbin] [-O str] [-o str] [-m addr] [-@ addr] [-n str] file

DESCRIPTION
This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.

-A  List archs

-a arch
    Set arch (x86, arm, .. accepts underscore for bits x86_32)

-b bits
    Set bits (32, 64, ...)

-B addr
    Override baddr

-c [fmt:C[:D]]
    Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an hexpair list of the code bytes and ':D' is an optional concatenation to describe the bytes for the data section.

-C  List classes

-e  Show entrypoints for disk and on-memory

-f subbin
    Select sub-binary architecture. Useful for fat-mach0 binaries

-g  Same as -SMRevsiz (Show all possible information). See -r

-i  Show imports (symbols imported from libraries)

-s  Show exported symbols

-S  Show sections

-M  Show address of 'main' symbol

-z  Show strings inside .data section (like gnu strings does)

-I  Show binary info

-H  Show header fields

-l  List linked libraries to the binary

-R  Show realocations

-O str
    Write/extract operations (-O help)

-o str
    Output file/folder for write operations (out by default)

-r  Show output in radare format

-v  Display virtual addressing offsets

-m addr
    Show source line reference from a given address

-L  List supported bin plugins

-@ addr
    Show information (symbol, section, import) of the given address

-n str
    Show information (symbol, section, import) at string offset

-x  Extract all sub binaries from a fat binary (f.ex: fatmach0)

-V  Show version information

-h  Show usage help message.

EXAMPLES

List symbols of a program

$ rabin2 -s a.out

Get offset of symbol

$ rabin2 -n _main a.out

Get entrypoint

$ rabin2 -e a.out

Load symbols and imports from radare

.!rabin2 -vrsi a.out

SEE ALSO

rahash2(1), rafind2(1), radare2(1), radiff2(1), rasm2(1), rax2(1), rsc2(1), ragg2(1), rarun2(1),

AUTHORS

pancake <pancake@nopcode.org>, nibble <nibble@develsec.org>