radare2

Overview

radare2 is a command-line reverse-engineering framework for examining and working with binaries across many architectures. It is best suited to technically confident users who want to combine analysis, debugging and scripting in one toolkit. Its breadth is a strength, but users should be comfortable building their own workflow around command-line tools and plugins.

For a wider shortlist, see Reverse Engineering Tools.

Key features

• Binary analysis: radare2 can analyze, emulate, debug, modify and disassemble binaries, with hybrid analysis mode, a decompiler and firmware analysis. This range supports varied reverse-engineering work, while the many supported architectures make it particularly relevant when targets go beyond common desktop processors.
• Local and remote work: It can edit local files and view kernel memory, as well as debug programs locally or through remote GDB and WinDbg servers. That makes it useful for work spanning file inspection and remote debugging, though it is not presented as a guided, single-purpose application.
• Scripting: An embedded JavaScript interpreter and r2pipe, which supports scripting from other programming languages, offer ways to automate or adapt tasks. Users can choose scripting within the command-line tool or connect from another language.
• Plugins: The r2pm package manager searches for, installs, updates and uninstalls plugins and tools. Listed integrations include r2ghidra, r2frida, r2yara and r2pipe; a plugin API adds room to extend the toolkit, but plugin licensing can differ from radare2's own.
• Graphical interface: The project identifies iaito as its official Qt graphical interface. It provides a graphical option without changing radare2's core command-line character.

Pricing

The radare2 plan costs nothing and is a free reversing toolkit. Most of radare2 is licensed under LGPLv3, but dependencies and plugins may use other licenses. That makes the price straightforward, while users incorporating components should check the terms that apply to them.

There are no paid plan tiers described. Installation options include the project's recommended Git repository, released binaries, Nix packaging and source builds, giving users several routes to set it up.

Platforms

radare2 supports Windows, Linux, Darwin/macOS, GNU/Hurd, Apple iOS/iPadOS/watchOS, Android, BSD, QNX, Solaris, AIX, Haiku, SerenityOS and others. Its architecture coverage includes x86 and ARM alongside targets such as RISC-V, MIPS, PowerPC, AVR, WebAssembly, Dalvik and Java. That range is valuable for users facing varied targets; it is less compelling if a narrow, guided workflow matters more than breadth.

The project's security policy makes reported security bugs a top priority, with fixes required within 24 hours of disclosure. It does not backport fixes to old releases and has no bug bounty program, so users should not rely on older releases receiving security fixes.

Questions and feedback can go through the project's official book, chats and community channels.

Who it's for

radare2 suits reverse engineers, researchers and developers who need a broad toolkit for binary analysis and are willing to work from the command line, write scripts or manage plugins. Its architecture coverage and local and remote debugging options are useful for varied environments. Those seeking a more guided application or who need assurance of security fixes for old releases should look elsewhere.

Pros and cons

Pros

• Broad analysis capabilities: Analysis, emulation, debugging, modification, disassembly, decompilation and firmware analysis cover several kinds of binary work.
• Extensible workflows: JavaScript, r2pipe, a plugin API and r2pm let users automate tasks and add tools.
• Wide target coverage at no cost: The free plan and extensive platform and architecture support are useful for users working across different systems.
• Multiple interfaces: The official iaito Qt interface offers a graphical option alongside the command-line toolkit.

Cons

• Command-line-centered approach: Users who want a guided, narrowly focused application may find its workflow a poor fit.
• Licensing varies by component: Dependencies and plugins may use licenses other than LGPLv3, so the free toolkit does not mean every component has the same terms.
• No old-release security backports: Users cannot count on reported fixes being applied to older releases.

Alternatives

Frida is another free option for readers comparing tools across Android, iOS, desktop and API platforms.

rev.ng may suit readers interested in a free-software decompilation pipeline, with its UI offered commercially in cloud and standalone versions.

Rizin is another free binary analysis framework for readers considering a different option with Android, iOS, Linux, macOS and Windows support.

angr is a free, open-source alternative for readers looking for a Python 3.10+ tool on Windows, macOS or Linux.

Binary Ninja may suit readers who want a paid tier: its free plan is for evaluation and education, covers five decompilation architectures, and excludes API and plugin access.

IDA Pro offers a free plan for x86-32 and x86-64 disassembly, with two cloud-based decompilers and a named license.

JEB offers a free Community Edition with x86 and x86-64 decompilation for researchers, students, hobbyists and nonprofit reverse engineering.

Qiling Framework is another free option, licensed under GPLv2.

Verdict

Choose radare2 if you need a free, extensible toolkit for varied binary targets and value command-line analysis, debugging and scripting in one framework. Its breadth is the main reason to choose it; its command-line-centered workflow, component licensing variation and lack of security backports for old releases are reasons to look elsewhere.