The official radare2 account in the Fediverse
Posts
RBin now holds format parsers, loaders, xtr containers and demangler plugins! Remember that using -j you'll get a full json listing with authorship and license details of every single plugin compiled inside your favourite reversing toolkit!
💥 iaito 6.1.6 release notes are massive! 💥
Now it's time for packagers and distros to bring all those goods to the users \o/ https://github.com/radareorg/iaito/releases/tag/6.1.6
r2ghidra 6.1.6 is out! here's the changelog! https://github.com/radareorg/r2ghidra/releases/tag/6.1.6
⚠️Don’t get fooled by the version numbers in radare2. We don’t follow the semver rules, in r2land we use odd numbers to refer to unstable/development versions. If you care about abi breaks use the R2_ABIVERSION which will quickly point you to the specific change in apis or structs and its independent from release tags.
A small release like 6.1.4 -> 6.1.6 packs almost 500 commits and 24 abi changes.
📦radare2-6.1.6 codename “lospatos2”
- improved local variable analysis
- introduce dynamic calling conventions dsl
- better stack argument tracking, support multireturn pairs
- redesigned jump table analysis (afbt command), fixes rust and dex switch statements
- safer, faster and use less memory parsing binaries (30%)
- extended swift/objc support
- bump PPC emulation and analysis
- store types, local vars, callconvs and xrefs in new projects
r2mcp 1.8.2 is out, relevant changes are:
- http server mode from the r2 plugin
- more tool tags like exec and session
- bearer token auth for multi agent support
- improved regex and filtering capabilities for large outputs
- new run_script tool
One plugin left to complete the mobile trinity https://github.com/radareorg/r2unity /by @pancake@infosec.exchange #unity #il2cpp #reverseengineering
The r2ai integration with Iaito now supports running separate async tasks in parallel tabs with tool approval (or yolo mode), custom skills support, and lots of settings to play with! #reverseengineering #llm
Last release fixed a buffer overflow vulnerability in the client implementation in radare2 for the QNX debugger protocol. The reported posted a pretty detailed writeup about the vulnerability 👉 https://f00crew.org/0x4c
radare2-bindings are back! Use the native APIs of #radare2 directly from Python, Go, #Vala or NodeJS/TypeScript, requires latest valabind 2.1.0 (or Swig). the vapi files has been updated to be in sync with r2-6.1.4 thanks to @AbhiTheModder@defcon.social for the contribs here to make that happen!
https://github.com/radareorg/radare2-bindings/releases/tag/6.1.4
Iaito 6.1.4 is out! 💥
Tons of stability improvements, new widgets, userfriendly features, brings back the debugger mode, display analysis progress and background webserver ideal for r2mcp.
Full changelog https://github.com/radareorg/iaito/releases/tag/6.1.4 #reverseengineering
#radare2
r2, r2frida, r2ghidra 6.1.4 are out! I will work tomorrow on the release notes! Stay tuned because this is probably the release that ships more security fixes in the whole history of the project! So please update asap!
“Exploring Android Protections on RASP Times" - using radare2 and frida to beat rasp — @justmobilesec@medium.com
Announcing the first version of the radare2 GithubAction!
Here’s why it’s important to always use r2 from git. In r2land, we follow the law of full disclosure and fix any reported vulnerability within a 24h deadline, as stated in SECURITY.md #radare2 https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
Codex plugins are packages for skills, mcps and prompts, adding descriptions, icon and tie them to distributed marketplaces to handle updates. r2mcp is now distributed as one.
Just run “make codex-plugin-install” and enjoy it in vscode, codex app and codex cli!
“Reverse Engineering the ITE 8910 Keyboard RGB Protocol for OpenRGB” with #radare2 https://chocapikk.com/posts/2026/reverse-engineering-ite8910-keyboard-rgb/
@asher_davila@infosec.exchange just open sourced its #radare2 Python script for parsing .gopclntab and recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE across Go versions 1.2, 1.16, 1.18, and 1.20+ https://github.com/AsherDLL/r2gopclntabParser #golang #reverseengineering
💥New release of BannedFuncDetector by @seifreed@infosec.exchange
〰️〰️〰️〰️〰️〰️〰️〰️〰️
BannedFuncDetector is a Python tool that scans binary files to detect banned or insecure functions. It supports traditional radare2 decompilers and AI-assisted decompilation to provide readable output and highlight risky calls.
The 6.1.2 releases are out! 🥳
iaito 6.1.0 is out! https://github.com/radareorg/iaito/releases/tag/6.1.0 #radare2 #reverseengineering
You can now choose where to locate the navigation bar and the colors match the selected color theme. Next release will hopefully be next week! Keep up testing and reporting anything you find :)
"Exploring Android Protections on RASP Times" with Frida and Radare2 -- https://www.linkedin.com/pulse/exploring-android-protections-rasp-times-just-mobile-security-lc5gf/
🌍Making #radare2 more portable and accessible to new audiences has been always a priority for us.
At #r2con2025, @AbhiTheModder@defcon.social created a web frontend for #radare2 using the webassembly builds to allow Chromebook students reverse engineer crackmes from the browser!
• Select version of r2
• Create multiple tabs
• Keyboard driven
• Analyze large binaries
This sandboxed environment is ideal for education as well as for malware analysis and the whole toolchain can be used from the commandline with wasmer.
• Try it online https://r2.revengi.in
• HTML radare2 Widget https://radareorg.github.io/r2wasm/index.html
• Source code https://github.com/radareorg/r2web
• Watch the presentation 👇
radare