summaryrefslogtreecommitdiffstats
path: root/docs/re/radare2_cheatsheet.txt
diff options
context:
space:
mode:
authorMalfurious <m@lfurio.us>2022-03-06 18:41:51 -0500
committerMalfurious <m@lfurio.us>2022-03-06 18:41:51 -0500
commit979df27c374181e2c1da8899a1f436d9a4ae29c8 (patch)
treeb0ec2ff69ef1b446b4f75ffd8172e80a01de66f4 /docs/re/radare2_cheatsheet.txt
parent880ba95060a03ef5e0dea93c14c4a5c56470b528 (diff)
parenta666136666e1ea6207cd3b7445fe9bc5ff3d59a8 (diff)
downloadlib-des-gnux-979df27c374181e2c1da8899a1f436d9a4ae29c8.tar.gz
lib-des-gnux-979df27c374181e2c1da8899a1f436d9a4ae29c8.zip
Merge tag 'pull-duso-tool-docs' of https://github.com/Dusoleil/lib-des-gnux
Pulling an assortment of tools documentation from Dusoleil. I did fix 1 minor conflict in the readme file. * tag 'pull-duso-tool-docs' of https://github.com/Dusoleil/lib-des-gnux: (21 commits) Remove 'sudo' from install command. Fix typo in for loop in asm rep prefix doc Add install/uninstall instructions to radare doc Add radare2 command cheatsheet Add doc about fixing a ptrace error in debugger. Add doc about the rep prefix on an x86 instruction Add short doc on the one_gadget tool Remove curl example line from README Add cheatsheet of common flags for curl Add a short doc with links to reqbin and hookbin Add Short Doc About proxychains Add Example that Uses Custom Charset Update Incremental Examples to Use Short Flag Add Info About Issues with Small Workload Add More Mask/Hybrid Attacks to Examples Add Examples for Showing Cracks/Identifying Type Add --status Flag to Examples Fix Paths in Examples Remove "LIGHT"/"HEAVY" Descriptors from Examples Add hashcat doc ...
Diffstat (limited to '')
-rw-r--r--docs/re/radare2_cheatsheet.txt88
1 files changed, 88 insertions, 0 deletions
diff --git a/docs/re/radare2_cheatsheet.txt b/docs/re/radare2_cheatsheet.txt
new file mode 100644
index 0000000..7c30b89
--- /dev/null
+++ b/docs/re/radare2_cheatsheet.txt
@@ -0,0 +1,88 @@
+r2 command cheatsheet
+
+https://github.com/radareorg/radare2
+https://book.rada.re
+
+#Install
+git clone https://github.com/radareorg/radare2.git
+./sys/install.sh
+
+#Uninstall
+sudo make uninstall
+sudo make purge
+
+#Run Command From Shell Without Opening r2 Prompt
+r2 -q -c "<r2 command>" <target>
+
+#Generic
+? <expr> expression evaluation/conversions
+!<command> run shell command from inside r2
+s <addr> seek to address
+
+#Useful Operators
+<command1>;<command2> do command2 after command1
+"<command>" don't parse r2 operators in the command
+<command> `<inner command>` run inner command and use its output in outer command
+<command> ~<word> grep output of command for lines matching word
+<command> @ <address> temporarily seek to address and run command
+<command> @@ <flag>* run command on every flag matching flag*
+<command> @@f run command on all functions
+<command> @@f:<func> run command on all functions matching name
+<command> @@s:<from> <to> <step> run command on each offset from->to incrementing by step
+
+#Info and Analysis
+i print file info (including binary info; e.g. rabin -I or checksec)
+ia print binary info, imported symbols, and exported symbols
+il print linked libraries
+iS print sections (with permissions)
+is print symbols
+ic print classes
+afl print functions
+ie print entry points
+iM print main's address
+iz print strings in data section
+izz print strings in whole binary
+aaa analyze all
+fs list flagspaces
+fs <flagspace> set current flagspace
+f print current flagspace
+axt [<addr>] show references to this address
+axf [<addr>] show references from this address
+
+#Searching
+/ <string> search for string
+/i <string> case-insensitive search for string
+/e /<string>/<options> regex search for string
+/R <opcodes> search for opcodes
+/R/ <opcodes> regex search for opcodes
+/v <value> search for value
+/V <min> <max> search for value in range
+/x <hex> search for hex string
+
+#Print Address Contents
+pdf print function disassembled
+pdc print function in c-like pseudo-code
+pv print value
+px print hexdump
+ps print string
+psz print zero-terminated string
+
+#Tracking Things
+afn <func> [<addr>] rename function at address
+afvn <arg> [<old_name>] rename variable or function argument
+
+#Visual Mode
+V enter visual mode
+VV enter visual graph mode
+: open r2 cli
+p next screen
+P previous screen
+g <address> seek to address
+[tag next to call] seek to tag (in visual mode)
+o[tag next to call] seek to tag (in visual graph mode)
+x xrefs to
+X xrefs from
+m<key> mark offset (in visual mode)
+'<key> seek to marked offset (in visual mode)
+u undo seek
+U redo seek