radare 
mastodon 4.8.0-alpha.3+glitchThe official radare2 account in the Fediverse
💥 iaito 6.1.6 release notes are massive! 💥
Now it's time for packagers and distros to bring all those goods to the users \o/ https://github.com/radareorg/iaito/releases/tag/6.1.6
Iaito 6.1.4 is out! 💥
Tons of stability improvements, new widgets, userfriendly features, brings back the debugger mode, display analysis progress and background webserver ideal for r2mcp.
Full changelog https://github.com/radareorg/iaito/releases/tag/6.1.4 #reverseengineering
#radare2
Hint of the day: if your AI agent runs #radare2 oneliners, set the R2_COLOR=0 environment variable to disable colors and save a bunch of tokens!
RBin now holds format parsers, loaders, xtr containers and demangler plugins! Remember that using -j you'll get a full json listing with authorship and license details of every single plugin compiled inside your favourite reversing toolkit!
r2ghidra 6.1.6 is out! here's the changelog! https://github.com/radareorg/r2ghidra/releases/tag/6.1.6
Here’s why it’s important to always use r2 from git. In r2land, we follow the law of full disclosure and fix any reported vulnerability within a 24h deadline, as stated in SECURITY.md #radare2 https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
radare2-bindings are back! Use the native APIs of #radare2 directly from Python, Go, #Vala or NodeJS/TypeScript, requires latest valabind 2.1.0 (or Swig). the vapi files has been updated to be in sync with r2-6.1.4 thanks to @AbhiTheModder@defcon.social for the contribs here to make that happen!
https://github.com/radareorg/radare2-bindings/releases/tag/6.1.4
r2, r2frida, r2ghidra 6.1.4 are out! I will work tomorrow on the release notes! Stay tuned because this is probably the release that ships more security fixes in the whole history of the project! So please update asap!
The 6.1.2 releases are out! 🥳
Last release fixed a buffer overflow vulnerability in the client implementation in radare2 for the QNX debugger protocol. The reported posted a pretty detailed writeup about the vulnerability 👉 https://f00crew.org/0x4c
@asher_davila@infosec.exchange just open sourced its #radare2 Python script for parsing .gopclntab and recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE across Go versions 1.2, 1.16, 1.18, and 1.20+ https://github.com/AsherDLL/r2gopclntabParser #golang #reverseengineering
🌍Making #radare2 more portable and accessible to new audiences has been always a priority for us.
At #r2con2025, @AbhiTheModder@defcon.social created a web frontend for #radare2 using the webassembly builds to allow Chromebook students reverse engineer crackmes from the browser!
• Select version of r2
• Create multiple tabs
• Keyboard driven
• Analyze large binaries
This sandboxed environment is ideal for education as well as for malware analysis and the whole toolchain can be used from the commandline with wasmer.
• Try it online https://r2.revengi.in
• HTML radare2 Widget https://radareorg.github.io/r2wasm/index.html
• Source code https://github.com/radareorg/r2web
• Watch the presentation 👇
📦radare2-6.1.6 codename “lospatos2”
- improved local variable analysis
- introduce dynamic calling conventions dsl
- better stack argument tracking, support multireturn pairs
- redesigned jump table analysis (afbt command), fixes rust and dex switch statements
- safer, faster and use less memory parsing binaries (30%)
- extended swift/objc support
- bump PPC emulation and analysis
- store types, local vars, callconvs and xrefs in new projects
You can now choose where to locate the navigation bar and the colors match the selected color theme. Next release will hopefully be next week! Keep up testing and reporting anything you find :)
r2mcp 1.8.2 is out, relevant changes are:
- http server mode from the r2 plugin
- more tool tags like exec and session
- bearer token auth for multi agent support
- improved regex and filtering capabilities for large outputs
- new run_script tool
“Exploring Android Protections on RASP Times" - using radare2 and frida to beat rasp — @justmobilesec@medium.com
iaito 6.1.0 is out! https://github.com/radareorg/iaito/releases/tag/6.1.0 #radare2 #reverseengineering
Announcing the first version of the radare2 GithubAction!
This ChatGPT-like service for binary analysis is now running #radare2 on every prompt!
Combines the reports generated from batch runs of IDA, Ghidra and BinaryNinja for better contextual analysis.
Even if the primary focus is malware analysis, lots of use cases can be covered too.
“Reverse Engineering the ITE 8910 Keyboard RGB Protocol for OpenRGB” with #radare2 https://chocapikk.com/posts/2026/reverse-engineering-ite8910-keyboard-rgb/
💥New release of BannedFuncDetector by @seifreed@infosec.exchange
〰️〰️〰️〰️〰️〰️〰️〰️〰️
BannedFuncDetector is a Python tool that scans binary files to detect banned or insecure functions. It supports traditional radare2 decompilers and AI-assisted decompilation to provide readable output and highlight risky calls.
"Exploring Android Protections on RASP Times" with Frida and Radare2 -- https://www.linkedin.com/pulse/exploring-android-protections-rasp-times-just-mobile-security-lc5gf/
One plugin left to complete the mobile trinity https://github.com/radareorg/r2unity /by @pancake@infosec.exchange #unity #il2cpp #reverseengineering
Opening the CFP from the brand new #r2con2024 website https://radare.org/con/2024
Codex plugins are packages for skills, mcps and prompts, adding descriptions, icon and tie them to distributed marketplaces to handle updates. r2mcp is now distributed as one.
Just run “make codex-plugin-install” and enjoy it in vscode, codex app and codex cli!
⚠️Don’t get fooled by the version numbers in radare2. We don’t follow the semver rules, in r2land we use odd numbers to refer to unstable/development versions. If you care about abi breaks use the R2_ABIVERSION which will quickly point you to the specific change in apis or structs and its independent from release tags.
A small release like 6.1.4 -> 6.1.6 packs almost 500 commits and 24 abi changes.