0verflowme/radare2

Radare2 is a tool for reverse engineering, the practice of taking apart compiled software to understand how it works, even when you don't have access to the original source code. Imagine you have a program but no instructions on what it does under the hood. This project lets you crack it open, inspect the raw ingredients, and figure out its behavior. What started as a simple hex editor for forensics has grown into a full toolkit for analyzing, modifying, and debugging almost any software binary. At its core, it is a command-line program. You point it at a file, and it gives you ways to examine the data inside: printing hex dumps, listing internal functions, or drawing text-based maps of how the program flows. It can read files straight from your hard drive, inspect live computer memory, or even connect to a program running somewhere else to debug it remotely. Because it runs entirely via text commands, it is highly scriptable, you can automate complex analysis using its built-in JavaScript engine or from other programming languages. Security researchers, malware analysts, and hobbyists exploring old software use this to figure out what a program actually does. For example, a security professional might use it to safely take apart a suspicious file to see if it hides malicious behavior. Someone interested in retro computing could use it to dissect an old Game Boy game. It supports an enormous range of computer architectures and file formats, from modern Windows and Mac executables to obscure legacy systems. The project is notable for being free and open-source, built primarily in C for speed and flexibility. It includes a package manager to install a wide variety of community plugins, such as graphical interfaces or AI-assisted decompilers. There is also a visual interface called iaito for those who prefer clicking over typing. Its massive scope and plugin system let users tailor it to very specific analysis needs.