radare2

radare2 is a free, UNIX-like reverse-engineering framework and command-line toolset for examining binaries across many architectures. It can analyze, emulate, debug, modify, and disassemble programs, and supports firmware analysis and decompilation. It can edit local files, inspect kernel memory, and debug programs on the same machine or through remote GDB and WinDbg servers.

Scripting is available through an embedded JavaScript interpreter or r2pipe. The r2pm package manager can find, install, update, and remove plugins and tools; listed integrations include r2ghidra, r2frida, r2yara, and r2pipe. The project’s official graphical interface is iaito, built with Qt. Installation options include the Git repository, released binaries, Nix packaging, and source builds. Most of radare2 uses the LGPLv3 license, though dependencies and plugins may have different terms. It supports platforms including Windows, Linux, macOS, iOS, and Android, among many others. The project says security bug fixes are a top priority, but it does not backport them to old releases and has no bug bounty program.

radare2 provides a broad set of binary-analysis tools, with scripting, plugins, and an official Qt interface. Review license differences and the project’s security-fix policy before adopting it.

radare2 suits developers and security practitioners who need command-line tools for binary analysis, debugging, or firmware work. Its scripting and plugin options also fit users who want to extend their workflow.

Overview

radare2 is a command-line reverse-engineering framework for analyzing and working with binaries. It suits practitioners who need adaptable tools across architectures and are comfortable shaping their own workflow. Its range is a strength, but it asks more of users than a focused, guided application.

Alongside analysis and disassembly, it can emulate, debug, and modify binaries; the official Qt interface iaito offers a graphical option. The toolkit’s breadth makes it a compelling free choice for varied binary work, while its licensing mix and security-fix policy deserve attention before adoption.

For a wider shortlist, see Reverse Engineering Tools.

Key features

• Broad binary work: radare2 can analyze, emulate, debug, modify, and disassemble binaries across many architectures. That flexibility suits users with varied targets, though it may be more toolkit than someone seeking a narrowly focused workflow needs.
• Local and remote access: It can edit local files and view kernel memory, as well as debug locally or through remote GDB and WinDbg servers. This makes it useful for work spanning file inspection and remote debugging.
• Automation: The command-line tool supports scripting with an embedded JavaScript interpreter or through r2pipe, which allows scripting from other programming languages. Users can adapt repeatable tasks to their own needs rather than relying only on manual interaction.
• Extensibility: The r2pm package manager searches for, installs, updates, and uninstalls plugins and tools. Listed integrations include r2ghidra, r2frida, r2yara, and r2pipe; plugins expand the toolkit, but may bring license terms different from radare2’s.
• Graphical interface: iaito is the project’s official Qt interface. It gives users a graphical route into the project, while the core toolkit remains centered on command-line tools.
• Installation choices: The project recommends installation from its Git repository and also documents released binaries, Nix packaging, and source builds. The range accommodates different setups, but users should choose the route that fits their environment.

Pricing

radare2 is free: its plan costs nothing and provides a free reversing toolkit. There are no paid tiers to weigh against a reduced free version, making it an accessible option for individual users and teams evaluating a flexible binary-analysis toolset.

Most of radare2 is licensed under LGPLv3, while dependencies and plugins may use other licenses. The free price does not make every component’s terms uniform, so organizations should review the licenses relevant to their use.

Platforms

The project lists Android, API, iOS, Linux, macOS, self-hosted, and Windows. Its supported-platform list extends to GNU/Hurd, Apple iOS/iPadOS/watchOS, BSD, QNX, Solaris, AIX, Haiku, SerenityOS, and others. Supported architectures include x86 and ARM families, RISC-V, MIPS, PowerPC, Java, Dalvik, and WebAssembly, among many more. That breadth is valuable when targets vary; users working on a single platform may not need all of it.

Who it's for

radare2 is best for reverse engineers and developers who need a customizable command-line toolkit for binary analysis, emulation, debugging, modification, and scripting across architectures. Its plugin ecosystem and scripting options reward users who want to assemble or automate a workflow. It is a less natural fit for readers who want a guided, purpose-built interface or do not want to manage a broad toolset.

The project points users to its official book, chats, and community channels for questions and feedback. Its security policy prioritizes reported security-bug fixes and requires them within 24 hours of disclosure. However, it does not backport security fixes to old releases and currently has no bug bounty program; users should account for those limits when choosing a release and setting security expectations.

Pros and cons

• Pro: One free toolkit covers analysis, emulation, debugging, modification, and disassembly across many architectures, suiting varied binary work without a paid tier.
• Pro: JavaScript and r2pipe scripting, plus plugin management through r2pm, allow users to adapt and automate their workflows.
• Pro: The official Qt interface iaito provides a graphical option alongside the command-line tools.
• Con: The command-line-centered, broad toolkit places more responsibility on users to shape their workflow than a focused application would.
• Con: Dependencies and plugins may have licenses other than LGPLv3, requiring review beyond the core project’s main license.
• Con: Security fixes are not backported to old releases, and the project has no bug bounty program.

Alternatives

Frida is another free option, with listed platforms spanning Android, API, iOS, Linux, macOS, and Windows. Choose it when that platform range better matches your needs.

Rizin is a free, open-source binary-analysis framework for Android, iOS, Linux, macOS, and Windows. It is a reasonable alternative when those platforms and a binary-analysis framework are the main fit.

Androguard is a free option listed for Android.

BAP (Binary Analysis Platform) is a free, open-source binary-analysis platform for API, Linux, and self-hosted use. Consider it when those deployment options align with your work.

Boomerang is a free, open-source BSD-licensed decompiler for Linux, macOS, and Windows. Choose it when those platforms and a decompiler are the relevant focus.

IDA Pro offers a free tier with x86-32 and x86-64 disassembly, two cloud-based decompilers, and a named license on macOS, Linux, and Windows; IDA Pro Essential costs $1,099. It is an alternative for users who want that defined free scope or are considering its paid tier.

JEB has a free Community Edition and a free trial, with listed platforms of API, Linux, macOS, and Windows.

Qiling Framework is free software under GPLv2, with API, Linux, macOS, self-hosted, and Windows listed as platforms.

Verdict

Choose radare2 if you want a free, extensible command-line framework that can handle varied binary-analysis tasks across architectures. Its scripting, plugin support, and official Qt interface make it adaptable, but users must weigh its workflow demands, component-license differences, and lack of security backports for old releases. Look elsewhere if you need a more narrowly guided tool or require fixes to be backported to older versions.