radare2
radare.org
What it is
radare2 is a free, UNIX-like reverse-engineering framework and command-line toolset for working with binaries across many architectures. It can analyze, emulate, debug, modify, and disassemble binaries, as well as support firmware analysis and decompilation. The tools can edit local files, view kernel memory, and debug programs locally or through remote GDB and WinDbg servers. Scripting is available through an embedded JavaScript interpreter or r2pipe. Its r2pm package manager searches for, installs, updates, and uninstalls plugins and tools; listed plugins include r2ghidra, r2frida, r2yara, and r2pipe. The project identifies iaito, a Qt graphical interface, as its official GUI. Installation options include the Git repository, released binaries, Nix packaging, and source builds. Most of radare2 is licensed under LGPLv3, while dependencies and plugins may have different licenses. It supports operating systems including Windows, Linux, macOS, iOS, Android, BSD, and others, alongside a broad range of architectures.
Spec sheet
- Purpose
- radare2 is a UNIX-like reverse engineering framework and command-line toolset.Read 29 Sep 2026 · github.com
- Platforms
- Supported operating systems include Windows, Linux, Darwin, Apple's Mac and mobile operating systems, and Android.Read 29 Sep 2026 · github.com
- Integrations
- Listed plugins include r2ghidra, r2frida, r2yara, and r2pipe for scripting from other programming languages.Read 29 Sep 2026 · github.com
- Security
- The security policy says fixes for reported security bugs are top priority and required within 24 hours of disclosure.Read 29 Sep 2026 · github.com
- Support
- The project points users to its official book, chats, and community channels for questions and feedback.Read 29 Sep 2026 · github.com
- License
- Most of radare2 is licensed under LGPLv3, while dependencies and plugins may have different licenses.Read 29 Sep 2026 · github.com
- Analysis
- It can analyze, emulate, debug, modify, and disassemble binaries across many architectures.Read 29 Sep 2026 · github.com
- Extensibility
- The r2pm package manager can search, install, update, and uninstall plugins and tools.Read 29 Sep 2026 · github.com
- File handling
- It can edit local files, view kernel memory, and debug programs locally or through remote GDB and WinDbg servers.Read 29 Sep 2026 · github.com
- GUI
- The project identifies iaito as its official Qt graphical interface.Read 29 Sep 2026 · github.com
- Installation
- The project recommends installing from its Git repository and also documents released binaries, Nix packaging, and source builds.Read 29 Sep 2026 · github.com
- Scripting
- The command-line tool supports scripting with an embedded JavaScript interpreter or through r2pipe.Read 29 Sep 2026 · github.com
- Security limits
- The project says it does not backport security fixes to old releases and currently has no bug bounty program.Read 29 Sep 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Analyzes, emulates, debugs, modifies, and disassembles binaries
- Supports local and remote debugging
- JavaScript and r2pipe scripting options
- Plugin manager searches, installs, and updates tools
- Free toolkit; most of radare2 uses LGPLv3
Limits
- Most of the interface is command-line based
- Dependencies and plugins may use different licenses
- Security fixes are not backported to old releases
- No bug bounty program
Who it suits
It suits users who need command-line reverse-engineering tools for binary analysis, debugging, or modification across varied architectures. Its scripting, plugin manager, and optional Qt interface offer different ways to extend or use the toolkit.
radare2 in depth
Read the full write-up
Overview
radare2 is a free, UNIX-like framework for reverse engineering binaries. It suits analysts who want a flexible command-line toolkit they can script and extend. Its range is a strength, but it asks users to assemble their own workflow rather than follow a narrowly guided application.
Key features
radare2 can analyze, emulate, debug, modify, and disassemble binaries across many architectures. That combination makes it useful for varied binary work, while its hybrid analysis mode, decompiler, and firmware-analysis support broaden its reach beyond basic disassembly.
It can edit local files, view kernel memory, and debug programs locally or through remote GDB and WinDbg servers. The mix is valuable when work spans file inspection and debugging, though the command-line-centered approach will suit users comfortable working directly with tools and commands better than those seeking a polished, guided workflow.
Automation is supported through an embedded JavaScript interpreter or r2pipe, which lets users script from other programming languages. The r2pm package manager can search for, install, update, and remove plugins and tools; listed integrations include r2ghidra, r2frida, r2yara, and r2pipe. This extensibility can adapt the toolkit to different needs, but dependencies and plugins may carry licenses other than radare2's own.
The project identifies iaito as its official Qt graphical interface, offering a GUI alongside the command-line toolkit. Installation options include the recommended Git repository, released binaries, Nix packaging, and source builds.
Pricing
radare2 is free: its plan costs nothing. There are no paid tiers to weigh against a free-plan cap in the stated plan. It is a strong fit for readers seeking a no-cost reversing toolkit, with the important qualification that most of radare2 is licensed under LGPLv3 while dependencies and plugins may use different licenses.
Platforms
Supported platforms include Windows, Linux, macOS, Android, iOS, self-hosted environments, and API use. The project lists a much broader range, including GNU/Hurd, BSD, QNX, Solaris, AIX, Haiku, SerenityOS, and other systems. Its architecture support spans common targets such as x86, ARM, MIPS, PowerPC, and RISC-V as well as numerous embedded, legacy, virtual-machine, and game-console architectures. This breadth is useful for analysts dealing with unusual targets, but the right fit still depends on the specific binary and environment.
Who it's for
Choose radare2 if you need a free, extensible framework for reverse engineering across diverse architectures, and value scripting, plugin support, or local and remote debugging. It is less suitable if you want a guided, narrowly scoped interface that minimizes workflow assembly.
Pros and cons
Pro: Analysis, emulation, debugging, modification, and disassembly in one toolkit support varied binary workflows.
Pro: JavaScript and r2pipe scripting, plus r2pm plugin management, give users ways to automate and extend their setup.
Pro: The official Qt interface gives users a graphical option in addition to the command line.
Con: The command-line-centered design puts more responsibility on users to shape their workflow.
Con: Dependencies and plugins may use licenses different from the LGPLv3 license covering most of radare2, so users should check components they rely on.
Con: Security fixes are not backported to old releases, and the project has no bug bounty program.
Alternatives
For a broader shortlist, see Reverse Engineering Tools.
JEB is worth considering if its free Community Edition's x86 and x86-64 decompilation scope fits your needs, or if you want to compare a freemium option with a free trial.
Rizin is another free binary-analysis framework, with support for Android, iOS, Linux, macOS, and Windows.
Binary Ninja may suit readers who prefer a paid personal option or a free evaluation and education tier limited to five decompilation architectures without API or plugin access.
rev.ng is an alternative if you want its decompilation pipeline as Free Software and are open to a UI offered commercially in cloud and standalone versions.
Boomerang is a free, BSD-licensed decompiler for Linux, macOS, and Windows.
Frida is free software with support for Android, iOS, Linux, macOS, and Windows.
Qiling Framework is a free-software alternative under GPLv2, with support for API use, Linux, self-hosted environments, and Windows.
Cutter is a free and open-source option under GPLv3 for Linux, macOS, and Windows.
Verdict
Choose radare2 if you want a free, highly extensible reversing framework that spans many architectures and supports scripting, plugins, and remote debugging. Look elsewhere if you need a guided workflow or require security fixes to be backported to older releases.
Verdict
radare2 offers a broad command-line toolkit with scripting, plugins, and an official Qt interface. Check licensing across dependencies and plugins, and note that security fixes are not backported to old releases.
Where Specifiction places it
- Reverse Engineering Tools#31 of 737.6