radare2

Overview

radare2 is a free reverse-engineering framework for examining and working with binaries across many architectures. It suits technically confident users who want a configurable toolkit; its breadth is a strength, but its command-line focus makes it less suitable for anyone seeking a guided, single-purpose application.

Analysis, emulation, debugging, modification, and scripting sit within one framework, with iaito as its official Qt graphical interface. That range can support varied binary work, though users should expect to shape their own workflows rather than follow a narrowly defined path.

For a broader shortlist, see Reverse Engineering Tools.

Key features

• Architecture-spanning analysis: radare2 can analyze, emulate, debug, modify, and disassemble binaries across a broad set of architectures, including ARM, x86-64, RISC-V, WebAssembly, and Dalvik. This is useful when work spans different targets; users focused on a single platform may not need such range.
• Local and remote inspection: It can edit local files and view kernel memory, and debug programs locally or through remote GDB and WinDbg servers. That makes it relevant to both file analysis and debugging across a connection.
• Automation: The command-line tools support an embedded JavaScript interpreter, while r2pipe lets users script from other programming languages. These options reward users who want repeatable or customized workflows.
• Plugins: The r2pm package manager can search, install, update, and remove plugins and tools. Listed integrations include r2ghidra, r2frida, r2yara, and r2pipe; extensibility broadens the toolkit, while making plugin choice and compatibility part of the user's work.
• Graphical interface: iaito is the project's official Qt interface. It offers a graphical route into the ecosystem, but does not change radare2's command-line-centered character.
• Installation choices: The project recommends installation from its Git repository and also documents released binaries, Nix packaging, and source builds. That suits users comfortable choosing and maintaining an installation route.

Pricing

radare2 is free: the plan costs nothing and provides a free reversing toolkit. Most of radare2 is licensed under LGPLv3; dependencies and plugins may carry different licenses, so check those terms when combining components. There are no paid tiers or seat limits in this plan.

Platforms

radare2 supports Windows, Linux, Darwin/macOS, Android, iOS and other Apple operating systems, BSD, QNX, Solaris, AIX, GNU/Hurd, Haiku, SerenityOS, and more. The project also supports numerous processor and virtual-machine architectures, from i386 and ARM to EVM and CHIP-8. This reach is a clear advantage for work across operating systems and targets, though a long platform list does not make the workflow simpler.

Who it's for

Choose radare2 if you need a free, extensible framework for binary analysis and debugging across different architectures, and are comfortable working from command-line tools or building a workflow around plugins and scripts. It is less compelling for users who want a tightly guided interface or a narrowly scoped tool with fewer decisions to make.

The project directs users to its official book, chats, and community channels for questions and feedback. Its security policy prioritizes fixes for reported vulnerabilities, with fixes required within 24 hours of disclosure; it does not backport fixes to old releases and currently has no bug bounty program. Users relying on older releases should account for that lack of backported fixes.

Pros and cons

• Pros: Free access to analysis, emulation, debugging, and modification across many architectures makes it useful for varied binary work without a paid tier.
• Pros: JavaScript scripting, r2pipe, and a package manager for plugins give technically capable users ways to automate and extend their workflows.
• Cons: Its command-line-centered design and broad scope put more responsibility on users than a focused, guided application would.
• Cons: Dependencies and plugins can have different licenses, and old releases do not receive backported security fixes; both matter when selecting components and maintaining deployments.

Alternatives

• Frida is another free option with Android, iOS, Linux, macOS, Windows, and API platforms; consider it if you want a different free tool for those environments.
• Rizin is a free and open-source binary analysis framework for Android, iOS, Linux, macOS, and Windows. Pick it if you want a related framework with that stated platform coverage.
• Binary Ninja offers a free evaluation and education plan with five decompilation architectures but no API or plugin access, alongside a Personal plan at $199, paid once. It may suit readers who want to compare a limited free entry point with a paid option.
• Qiling Framework is free software under GPLv2 for API, Linux, macOS, self-hosted, and Windows platforms; consider it if those environments and licensing terms fit your needs.
• rev.ng makes its decompilation pipeline free software and says its UI will be offered commercially in cloud and standalone versions. Choose it if that split between an open pipeline and commercial UI suits your plans.
• IDA Pro has a free plan for x86-32 and x86-64 disassembly with two cloud-based decompilers, plus a 1099.00 USD IDA Pro Essential plan. It is worth considering if that stated architecture scope and plan structure match your work.
• JEB offers a free Community Edition with x86 and x86-64 decompilation for researchers, students, hobbyists, and nonprofit reverse engineering, as well as a free trial. Consider it if you fit that audience and target scope.
• angr is a free, BSD-licensed option for Windows, macOS, and Linux that requires Python 3.10 or later. Pick it if those requirements suit your environment.

Verdict

Choose radare2 if you want a free, extensible reverse-engineering toolkit that spans analysis, debugging, scripting, and many architectures. Its main draw is that breadth without a paid tier; look elsewhere if you need a more guided workflow or cannot accommodate varying plugin licenses and the absence of security backports for old releases.