skills.rest
dbx0
dbx0COMMUNITY
Explore all skills by this author →
WebsiteGitHub

radare2

Analyze binaries with radare2 CLI for disassembly, strings, imports, and patching.

7|4|Updated Jun 22, 2026
Search Tags:#reverse engineering#binary analysis#patching#disassembly#rabin2#radare2#malware analysis
One-click install
npx skills add https://github.com/dbx0/skills --skill radare2-dbx0
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: radare2
Source: https://github.com/dbx0/skills/tree/main/skills/binary-re-pwn/reverse-engineering/radare2
Command: npx skills add https://github.com/dbx0/skills --skill radare2-dbx0

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Reverse engineering binaries from the command line requires knowing dozens of radare2 commands and sub-tools; this Skill provides a structured methodology for recon, function analysis, string cross-referencing, and safe patching without a GUI. ## Core Features & Use Cases - Quick Recon Script: Run the bundled recon script to get file info, sections, imports, exports, and strings in one pass, with optional auto-analysis. - Interactive Analysis Workflows: Guided command sequences for locating main, finding string references with axt, disassembling functions with pdf, and hex inspection. - Safe Binary Patching: Write-mode workflows with backup reminders for modifying instructions via wa/wx, plus sub-tool coverage for rasm2, radiff2, rahash2, and rax2. - Use Case: You receive a suspicious Windows executable and need to know what it does. Run the recon script to extract strings and imports, identify network and registry APIs, then use axt to trace which function references a suspicious URL. ## Quick Start Use the radare2 skill to analyze this exe file and tell me what it does based on its strings and imports.

Frequently Asked Questions about radare2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze an exe file with radare2?▼

Start with rabin2 -I for file info, rabin2 -z for strings, and rabin2 -i for imports. Then open the file with r2, run aaa for auto-analysis, and use afl and pdf to inspect functions.

How to find which function references a string in radare2?▼

Use iz~keyword to locate the string's address, then run axt <addr> to list cross-references. Jump to the referencing address with s <addr> and disassemble the function with pdf.

radare2 vs IDA for reverse engineering, which should I use?▼

radare2 suits fast command-line recon, scripting, and lightweight patching across many formats. IDA is better when you need Hex-Rays-style decompilation, pseudocode, or a GUI-driven deep analysis workflow.

Can radare2 patch a binary on Windows?▼

Yes, open the file with r2 -w, seek to the target address, and write changes with wa for assembly or wx for raw bytes, then wq to save. Back up the original file first since writes modify it directly.

Why does rabin2 show an .sdb missing warning on Windows?▼

Some PE files trigger a warning about missing format DLL .sdb files during rabin2 recon. If the main output returns normally, the warning is incidental and does not affect the recon results.

What file formats does radare2 support for analysis?▼

radare2 handles PE executables and DLLs, ELF binaries, Mach-O, DEX, APK, and WASM files. The same rabin2 and r2 commands apply across formats for info, strings, imports, and disassembly.

Related Skills

Explore More Software Engineering Skills→
FuzzdkkFuzzdkk
3

malware-triage

Extract indicators from suspicious files via static malware analysis.

Community
Advanced
chengzongcaichengzongcai
21

reverse-engineering

Analyzes compiled, obfuscated, and packed binaries using static and dynamic reverse engineering workflows.

Community
Advanced
GhostPWNGhostPWN
4

Malware Analysis & Sandboxing

Extract hashes, strings, imports, and entropy from suspicious binaries.

Official
Advanced
WingsZengWingsZeng
2

idapython

Automate IDA Pro disassembly and decompilation with Python scripting APIs.

Community
Advanced