r2tips

Shared account to publish tips for radare2

[r2tips @r2tips]

Hey there, r2land!

We are eager to hear about the @radareorg tips you find most useful when using r2 for RE, malware analysis, exploiting, random CTFs... Or whatever you are using r2 for.

Just send us a DM and we will share your tips 😉

[r2tips @r2tips]

Do you have a premium license already?

[r2tips @r2tips]

What's your feeling by reading little endian base36 offsets instead of the classic big endian base16 ones?

[r2tips @r2tips]

Can you run doom in #radare2 ? Of course you can! r2pm -ci r2doom ; r2pm -r r2doom

Read this thread for more details: https://t.co/flzEJbirpK

[radare @radareorg]

Added Initial support for SM5xx 4bit MCUs! This is the second 4 bit architecture supported in #radare2 (after intel 4004) and it's the brain behind the nostalgic Game&Watch handheld electronic games, but also shipped in some calculators.

[r2tips @r2tips]

Can you run doom in #radare2 ? Of course you can! r2pm -ci r2doom ; r2pm -r r2doom

Read this thread for more details: https://t.co/flzEJbirpK

[radare @radareorg]

The new asm.bytes.asbits display the instruction bytes in the disassembly in bits format, which is ideal for manually dissecting instructions, implementing or fixing disassemblers and better understanding of the architecture details

[r2tips @r2tips]

There are some experimental graph visualization options that can lead to such kind of results. This is done with `e graph.bubble=true` feel free to play with the canvas api and submit your PRs!

[r2tips @r2tips]

The @@= iterator operator takes a space separated list of offsets (or flag names) to temporary seek on every execution of the command defined in the left side of the expression. Here’s an example:

af @@= `pI $SS~call[1]` # analyze every function pointed by the call operand

[r2tips @r2tips]

The new "" command prefix allows to run commands thru the RCore.cmdCall function that runs a command without evaluating any special char. That avoids command injection issues and runs commands faster because it skips all parsing logic.

[r2tips @r2tips]

oneliner of the day

[r2tips @r2tips]

$ai scr.color

[r2tips @r2tips]

To get fluent with the r2 codebase for contributing or developing your own plugins or fixes is good to watch the introductory developer training from r2con2021 by @trufae https://t.co/ec83klwbYC

[r2tips @r2tips]

Remember the internet time from the swatch watches? You can now sync with your friends worldwide using the r2's ⌚︎⇠👀

[r2tips @r2tips]

The sys/subst.sh script is useful when refactoring code. A good companion of git grep. It takes two arguments and replaces the matches in libr/**/*.[ch]

[r2tips @r2tips]

You can now install the https://t.co/7w0uTRshkV webapp on any iOS device for offline use by saving the website into your homescreen

[Jared @DLL_Cool_J]

🔍 #radare2 trick of the week

Leverage "pcy <number_of_bytes_here>" to print a byte array of an interesting string/symbol/etc... in #yara format!

#malware #dfir

[r2tips @r2tips]

To use r2 inside a docker image you can use the r2pm package or run `make -C dist/docker` in the source directory to get a shell with everything setup, contribs are welcome in case you miss anything and there are probably things to improve.

[radare @radareorg]

You can now build me with @ziglang ! the sys/zig.sh script will do all the “hard part” for you. Next step: crossbuilds with `zig cc`! (You need zig 0.10 at least) Congrats to the Zig team for delivering such a big milestone!

[r2tips @r2tips]

r2 command syntax evolves with user feedback, usability and new use cases. If there’s anything you can’t or don’t know how to do, open a new topic in https://t.co/SXbnmoeg7K

[r2tips @r2tips]

What’s your favourite feature of @radareorg ?