116 lines
2.5 KiB
Groff
116 lines
2.5 KiB
Groff
.TH RABIN2 1
|
|
.SH NAME
|
|
rabin2 \- Binary program info extractor
|
|
.Dd Nov 11, 2013
|
|
.Pp
|
|
.Sh SYNOPSIS
|
|
.Nm rabin2
|
|
.Op Fl ACeigsSMzIHlRrLxvVh
|
|
.Op Fl a Ar arch
|
|
.Op Fl b Ar bits
|
|
.Op Fl B Ar addr
|
|
.Op Fl c Ar fmt:C:[D]
|
|
.Op Fl f Ar subbin
|
|
.Op Fl k Ar query
|
|
.Op Fl O Ar str
|
|
.Op Fl o Ar str
|
|
.Op Fl m Ar addr
|
|
.Op Fl @ Ar addr
|
|
.Op Fl n Ar str
|
|
.Ar file
|
|
.Sh DESCRIPTION
|
|
This program allows you to get information about ELF/PE/MZ and CLASS files in a simple way.
|
|
.Bl -tag -width Fl
|
|
.It Fl A
|
|
List archs
|
|
.It Fl a Ar arch
|
|
Set arch (x86, arm, .. accepts underscore for bits x86_32)
|
|
.It Fl b Ar bits
|
|
Set bits (32, 64, ...)
|
|
.It Fl B Ar addr
|
|
Override baddr
|
|
.It Fl c Ar [fmt:C[:D]]
|
|
Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries where 'C' is an hexpair list of the code bytes and ':D' is an optional concatenation to describe the bytes for the data section.
|
|
.It Fl C
|
|
List classes
|
|
.It Fl e
|
|
Show entrypoints for disk and on-memory
|
|
.It Fl f Ar subbin
|
|
Select sub-binary architecture. Useful for fat-mach0 binaries
|
|
.It Fl g
|
|
Same as \-SMRevsiz (Show all possible information). See \-r
|
|
.It Fl i
|
|
Show imports (symbols imported from libraries)
|
|
.It Fl k Ar query
|
|
Perform SDB query on loaded file
|
|
.It Fl s
|
|
Show exported symbols
|
|
.It Fl S
|
|
Show sections
|
|
.It Fl M
|
|
Show address of 'main' symbol
|
|
.It Fl z
|
|
Show strings inside .data section (like gnu strings does)
|
|
.It Fl I
|
|
Show binary info
|
|
.It Fl H
|
|
Show header fields
|
|
.It Fl l
|
|
List linked libraries to the binary
|
|
.It Fl R
|
|
Show realocations
|
|
.It Fl O Ar str
|
|
Write/extract operations (\-O help)
|
|
.It Fl o Ar str
|
|
Output file/folder for write operations (out by default)
|
|
.It Fl r
|
|
Show output in radare format
|
|
.It Fl v
|
|
Display virtual addressing offsets
|
|
.It Fl m Ar addr
|
|
Show source line reference from a given address
|
|
.It Fl L
|
|
List supported bin plugins
|
|
.It Fl @ Ar addr
|
|
Show information (symbol, section, import) of the given address
|
|
.It Fl n Ar str
|
|
Show information (symbol, section, import) at string offset
|
|
.It Fl x
|
|
Extract all sub binaries from a fat binary (f.ex: fatmach0)
|
|
.It Fl V
|
|
Show version information
|
|
.It Fl h
|
|
Show usage help message.
|
|
.El
|
|
.Sh EXAMPLES
|
|
.Pp
|
|
List symbols of a program
|
|
.Pp
|
|
$ rabin2 \-s a.out
|
|
.Pp
|
|
Get offset of symbol
|
|
.Pp
|
|
$ rabin2 \-n _main a.out
|
|
.Pp
|
|
Get entrypoint
|
|
.Pp
|
|
$ rabin2 \-e a.out
|
|
.Pp
|
|
Load symbols and imports from radare
|
|
.Pp
|
|
.!rabin2 \-vrsi a.out
|
|
.Sh SEE ALSO
|
|
.Pp
|
|
.Xr rahash2(1) ,
|
|
.Xr rafind2(1) ,
|
|
.Xr radare2(1) ,
|
|
.Xr radiff2(1) ,
|
|
.Xr rasm2(1) ,
|
|
.Xr rax2(1) ,
|
|
.Xr rsc2(1) ,
|
|
.Xr ragg2(1) ,
|
|
.Xr rarun2(1) ,
|
|
.Sh AUTHORS
|
|
.Pp
|
|
Written by pancake <pancake@nopcode.org>.
|