agentsclimarketplace
Sign in

Reverse engineering binaries with radare2 rizin

Skill meltedinhex/analyst-ai-pack/skills/reverse-engineering-binaries-with-radare2-rizin

Reverse engineers binaries using radare2/rizin interactively, covering analysis initialization, navigation, disassembly and graph views, patching, and the visual mode workflow. Activates for requests to reverse a binary with radare2 or rizin, learn r2 commands, or navigate and disassemble a sample in r2.From its SKILL.md

Install
npx -y skills add meltedinhex/analyst-ai-pack --skill reverse-engineering-binaries-with-radare2-rizin

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 21 stars21 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its file declares

Copied from the file, not written here

The file declares its own license as Apache-2.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.5 KB, 473 tokens by cl100k_base, as published. Nobody here has run it

Reverse Engineering Binaries With radare2/rizin

When to Use

  • You want to statically reverse a binary with the radare2/rizin command set: analyze, navigate functions, read disassembly/graphs, and patch.
  • You prefer a scriptable, terminal-based RE workflow.

Do not use r2's debug mode (-d) to run untrusted samples on your host — for static RE, open without debugging. Work in an isolated environment.

Prerequisites

  • radare2 or rizin installed and the sample (read inertly).

Safety & Handling

  • Static analysis does not execute the sample; keep the working directory isolated.

Workflow

Step 1: Open and analyze

python scripts/analyst.py cheatsheet analyze

Prints the core sequence: open read-only (r2 -e bin.cache=true sample), aaa to analyze, afl to list functions, iI/ie for info/entrypoint.

Step 2: Navigate and disassemble

Use s <addr>/s main to seek, pdf to print a function, VV for the graph view, and axt for cross-references.

Step 3: Annotate

Rename with afn, add comments with CC, define data with Cd, and flag locations with f.

Step 4: Patch (optional)

In write mode (-w), use wa/wx to assemble/patch and re-verify with pdf.

Validation

  • aaa completes and afl lists functions before deeper navigation.
  • Commands used are real r2/rizin commands (verifiable in the book).
  • Patches are re-disassembled to confirm the intended change.

Pitfalls

  • Forgetting aaa, leaving functions undefined.
  • Confusing radare2 and rizin command differences in scripts.
  • Opening with -d (debug/run) when only static analysis is intended.

References

What ships with it: 3 files

4.0 KB alongside SKILL.md, 1 of them executable

references/

scripts/

Keep looking

Skills are one crate of 326,144. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.