Radare2 — The Cyber Toolchain

Radare2 6.2.4

Mon, 05 Oct 2026 19:52:50 GMT

Radare2 6.2.4 adds s1c88 CPU support, Go/Swift calling conventions, sparse gap search, and compact try/catch commands.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `iw.` command to show try/catch blocks of the current function only.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `/xs` sparse gap search command. • Adds `iicl` command to list imports by class. • Adds `r2pm -b` to install released binary packages. • Adds compact try/catch metadata commands (`iw` now shows readable try/catch regions). • Adds `fh` address and JSON tree output. • Adds support for the s1c88 CPU architecture. • Adds Golang calling convention (`golang cc`) to the analysis engine. • Defaults Swift binaries to the Swift calling convention automatically. • Adds A-key pointer authentication function prelude recognition for ARM64. • Adds `DW_OP_call_frame_cfa` DWARF location kind support instead of faking a bp offset. • Adds an RBin plugin for binary project headers. • Adds Mach-O weak import writing support. • Adds reversible Mach-O weak dylib load operation. • Adds weak/strong symbol manipulation for ELF. • Adds the Swift linkage name role classifier for binary analysis. • Adds `CHKFEAT`, `GCSB DSYNC`, `CLRBHB`, and `PACM` instruction support to the A64 fallback disassembler. • Adds the gettext family to the type database. • Adds `fpret` register names in calling convention definitions. • Adds `DW_OP_call_frame_cfa` location kind to DWARF variable support. • Tracks stack frames larger than 8 KiB. • Records stack allocation, red zone, and return mechanism per calling convention. • Sparse gaps in `pxs`/`xs` are now tied to `hex.cols` and `hex.gaplines` config keys. • Shows all unique `.comment` strings in the ELF compiler field. • Enables BookE on 64-bit PPC with Capstone 6. • Lists symbol-less TLS module relocs in `ir`. • Lists s390 jump slot relocs named by their import. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.2.2

Sun, 06 Sep 2026 17:32:21 GMT

Radare2 6.2.2 adds a JNI analysis plugin, NVIDIA PTX SASS support, Haiku debugger, CIL/ESIL for .NET, and s390 pseudo-code. • Adds the `jni` analysis plugin to resolve typed JNI table calls, interface tables, indirection, and materialize JNI native methods during analysis. • Adds initial encode/decode/pseudo support for NVIDIA PTX SASS architecture. • Adds native debugger support for Haiku (x86-32/64), including data watchpoints and asynchronous thread exit handling. • Adds CIL token resolution and stack ESIL for .NET/CLR binaries. • Adds `s390` pseudo-code parser. • Adds support for Android-specific ELF relocations. • Adds full expansion of ELF RELR bitmap relocations. • Adds sideloading of Mach-O dSYM files matched by architecture slice and UUID. • Adds structured Java and JNI descriptor parsing. • Adds parsing of CLR exception clauses in .NET method bodies. • Adds parsing of Itanium exception regions from ELF `eh_frame`. • Adds `RBinSymbol.hsize` field for header metadata paddings. • Adds pcap stream selection support. • Adds `dyncc` floating-point argument registers to calling convention analysis. • Adds arm64 Swift calling convention support for FPU arguments. • Handles subregister arguments on x64 during variable recovery. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.2.0

Fri, 07 Aug 2026 18:27:18 GMT

Radare2 6.2.0 adds Rust v0 demangling, resource extraction commands, WebAssembly type support, PPC64 ELFv2 calling convention, struct synthesis, and more. • Adds `iuo` command to open binary resources inline and `ix` command to extract sections, segments, and resources. • Adds `iU` command (with `iUx` extraction) and `rabin2 -xU` flag for listing and extracting binary resources; old `iR` is renamed to `iU` and old `iU` moved to `iu`. • Adds `anal.gpseed` config key to seed a PIC base register during ESIL analysis. • Adds `asm.cmt.reguse` config key to emit register-use comments in disassembly. • Adds `dir.binsdb` config key (from binpath/dirprefix) for PE/MDMP ordinal lookups. • Adds `types.fields` config key to gate propagation of callee types into struct and union fields during `aaft`. • Adds `scr.drag` config key to enable click-and-drag scrolling in disasm, hex, and graph views. • Adds `Lcc` command to list all plugins registered with the new command API. • Adds `RArchOpMask.STATEFUL` and `RArchSession.reset` for stateful architecture decoding in plugins. • Adds `r_anal_cc_argslot` and `r_anal_cc_argval` APIs for resolving calling-convention stack argument slots. • Adds `r_anal_cc_isclobber` API for querying whether a register is clobbered by a calling convention. • Adds struct type synthesis from pointer-argument access patterns via the `afts` command. • Adds `&&` and `||` short-circuit command chaining support in the r2 shell. • Adds reguse analysis hints and exposes dyncc register role APIs. • Supports the ppc64 ELFv2 calling convention, selected automatically from the ELF ABI. • Adds initial Rust v0 symbol demangler, making Rust binaries easier to analyze. • Adds `v128`, `ref`, and `reftype` support for WebAssembly binaries. • Adds generic binary resource API with support for GLib Resources in ELF, Macho code signatures, PE/CLR resources, PE resources from MDMP, OS/2 LE/LX resources, QNX LMF resources, and Pebble resources. • Supports `&&` and `||` after literal commands in the shell pipeline. • Adds auth protection to `r2agent` web session spawns. • Protects `r2agent` with an HTTP auth file; empty lines in the auth file now block all access rather than allowing any password. • Selects the MIPS calling convention automatically from the ELF o32/n32 ABI. • Adds callconv definitions (clobber and preserve registers) for all supported architectures, including PPC and ARM. • Adds PPC64 TOC pointer base-register tracking, gated by `RArchOpMask.STATEFUL` and wired into `aar`. • Removes Capstone v3 support; Capstone v4 is now the minimum required version. • Makes RBin demanglers pluggable and selectable. • Adds MiKNix platform support in the build system. • Adds `dist/jslinux` target using temu/rv64 for JavaScript-based Linux builds. Breaking changes: • The `iR` command is renamed to `iU`; the old `iU` command is moved to `iu`; the `rabin2 -u` flag behavior is moved to an environment variable. • Capstone v3 support is removed; Capstone v4 is now the minimum supported version. • `RBinPluginAny` is renamed to `"null"` and no longer uses LibMagic. • Empty lines in the r2agent HTTP auth file now deny all access (previously they permitted any password through). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.2.0

Fri, 07 Aug 2026 18:27:18 GMT

Radare2 6.1.8

Tue, 23 Jun 2026 12:51:51 GMT

Radare2 6.1.8 adds new demanglers, JWT decoding, ESIL PPC coverage, new type commands, and more binary format support. • Adds Rust, D, C++, IBM XL, and ARM ABI demanglers for richer symbol resolution across more toolchains. • Implements `pFJ` command for decoding JWT tokens directly in the print pipeline. • Adds `idd` command for binary info inspection. • Adds `ten` command for enum lookup by numeric value. • Adds `tsn` command to look up struct names by size. • Adds FTAB extractor plugin for new binary format support. • Adds GNS1 binary loader improvements with better dyldcache false-positive detection. • Adds `R_DYLDCACHE_NO_DEPS` option for shallow dyldcache dependency filtering. • Adds ESIL modeling for PPC scalar floating-point load/store/arithmetic/convert operations. • Adds ESIL for PPC integer, logical, rotate, and mod operations including isel conditional-select. • Adds ESIL for PPC XER.CA carry flag for add/subtract-with-carry and algebraic shift-right. • Unifies `asm.addr.base10`/`asm.addr.base36` settings into a single `asm.addr.base` config key. • Supports hexdump/disasm address display in octal base. • Adds `CLd` command for source-baked decompiler output. • Adds `r2vsql` to the fallback command handler for SQL-style binary querying. • Ships syscall tables and a Pebble script for stub scans targeting PebbleOS. • Adds `ldmap.r2.js` script to load source-line information from linker map files. • Renders array stack variable element accesses as `name[i]` in disassembly. • Adds `RTableOptions.wrap` and improved Markdown table rendering with ellipsis trim and attribute support. • Extends all `p-`/`p=` commands with JSON output and improved bounds. • Ports `r2preload` to Windows. • Adds Nix flake and dev shell support for the build system. Breaking changes: • The `asm.addr.base10` and `asm.addr.base36` config keys are unified into `asm.addr.base`; existing configs using the old keys will break. • The default CPU for AVR is now `ATxmega128a4u`; setups relying on the previous default CPU may behave differently. • `iz+` now requires spaced arguments; scripts passing unspaced arguments to `iz+` will break. • `sdb_remove` is deprecated as a duplicate of `sdb_unset`; code using `sdb_remove` via the ABI may break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.1.8

Tue, 23 Jun 2026 12:51:51 GMT

Radare2 6.1.8 adds JWT decoding, new demanglers, type-lookup commands, FTAB/idd/R_DYLDCACHE_NO_DEPS, ESIL stepback, and PPC ESIL coverage. • Adds `pFJ` command for JWT token decoding in the print subsystem. • Adds `CLd` command for source-baked decompiler output. • Adds `tsn` command to look up struct names by size. • Adds `ten` command for enum lookup by numeric value. • Adds `idd` command for binary info inspection. • Adds `R_DYLDCACHE_NO_DEPS` option for shallow (dependency-filtered) dyldcache loading. • Adds FTAB extractor plugin for new binary format support. • Adds Rust, D, IBM XL, ARM ABI, and new C++ demangler support in the binary loader. • Adds `r2vsql` to the fallback command handler in the shell. • Adds `ldmap.r2.js` script to load source-line info from ldscript map files. • Adds a Pebble script for stub scans and ships PebbleOS syscall tables. • Supports hexdump/disasm address display in octal base. • Unifies `asm.addr.base10`/`asm.addr.base36` into a single `asm.addr.base` config option (breaking change). • Extends all `p-`/`p=` commands with JSON output and improved bounds handling. • Renders array stack variable element accesses as `name[i]` in disassembly. • Adds ESIL lifecycle and stepback support in core ESIL stepping. • Adds ESIL modeling for PPC scalar floating-point load/store/arithmetic/convert ops. • Adds ESIL for PPC integer/logical/rotate/mod ops and the `isel` conditional-select instruction. • Models PPC XER.CA ESIL for add/subtract-with-carry and algebraic shift-right. • Supports union offsets in type member lookup. • Adds inline markdown codeblock/span rendering and table trim with ellipsis. • Adds Nix flake and dev shell support under `dist/nix`. • Exposes addrline DWARF info in the r2 virtual filesystem. • Ports `r2preload` to Windows. Breaking changes: • The `sdb_remove` function has been deprecated as a duplicate of `sdb_unset` • The `asm.addr.base10` and `asm.addr.base36` config keys are unified into `asm.addr.base` • The `esil.verbose` config key has been removed • The default CPU for AVR is now `ATxmega128a4u` • The `iz+` command now requires spaced arguments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.1.6

Tue, 02 Jun 2026 23:07:09 GMT

Radare2 6.1.6 adds Zydis x86 backend, dynamic calling convention analysis, multireturn support, and sweeping DEX/Mach-O/ELF improvements. • Adds opt-in Zydis x86 arch plugin as an alternative disassembly backend. • Adds dynamic calling convention parser supporting Java, Dalvik, .NET, Python, and Wasm via `RBinPlugin.getCc`. • Adds initial multireturn support in calling convention analysis. • Renames `afj` to `afbt` and redesigns/extends the jump/switch table API and commands. • Adds `afbtj` branch-case display in analysis output. • Adds configurable jumptable maxcases for analysis. • Adds static x86 calling convention clobber, preserve, and stack-cleanup metadata. • Adds `ppc.nz` r_asm encoder plugin for PPC assembly. • Adds OpType/ESIL support for PPC dword shifts, X-form load/store, `cntlz`, `mulh`, and CR moves. • Adds `RArchInfo.WODST` flag for architectures with write-only destination operands. • Adds `ic[+-]` commands to add/remove class fields and inheritance info. • Adds `ii+` and `ii-` commands to add/remove imports interactively. • Adds `ies` extension for Dalvik `onCreate` symbol entrypoints. • Adds `bin.classes.namesonly` option to skip method/field parsing for faster loading. • Adds `bin.relocs.xrefs` config var to skip xref creation from relocations. • Adds `bin.unnamed` option (and `RBinOptions.loadUnnamed`) to skip loading unnamed symbols across ELF, SOM, dyldcache, and more formats. • Adds `bin.flags` config var to skip loading binary symbol flags. • Adds `bin.meta` config var to disable codemeta info loading. • Adds `anal.plugins.pre` config var. • Parses and displays DER signatures in Mach-O via the `iC` command. • Exposes `DYLD_ENVIRONMENT`, `__RESTRICT`, and `MH_APP_EXTENSION_SAFE` Mach-O metadata via sdb. • Exposes Mach-O signing type. • Recovers ObjC inheritance in analysis classes. • Parses valid Wasm sections 12 and 13 (datacount and tag). • Updates Wasm3 support for try/MMX ops. • Handles more PPC64 relocation types with big-endian-aware reloc patching. • Adds `r_bin_class_add_method` API and surfaces class methods. • Supports lazy-loading of DEX addrline debug info for faster loading. • Adds support for pining functions with custom emojis. • Adds `anal.flagbounds` (renamed from `anal.flagstop`) as a function boundary option. • Adds command file string API to the ABI. Breaking changes: • The `anal.flagstop` config variable is renamed to `anal.flagbounds`; existing configs using `anal.flagstop` will need to be updated. • The `afj` command is renamed to `afbt`; scripts or workflows invoking `afj` must be updated to use `afbt`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.1.4

Sun, 12 Apr 2026 18:32:08 GMT

Radare2 6.1.4 adds hardware breakpoints for winkd, new debug session checkpoints, pdub/pdur disasm commands, and JNI autoloading. • Adds hardware breakpoints support for winkd debug backend. • Adds single stepping and wait reasons for winkd. • Adds branchable debug session checkpoints for snapshot-based reversing. • Adds `@p:PID`, `@dr:`, and `@dp:` aliases for temporal process/thread attach. • Adds `pdub` (disassemble until end-of-block) and `pdur` (disassemble until return) commands. • Autoloads JNI types when loading Android binaries and lists JNI_* symbols via `ies`. • Adds `Analysis.Plugins` submenu and filesystem manager (fs and js shells) to the Panels UI. • Adds `R2_PLUGINS_ORDER` environment variable to control plugin load locations. • Extends `aCe`/`aCf` commands to support plaintext, JSON, and r2 output modes. • Adds `a:autoname` analysis plugin and improves function autoname scoring strategy. • Adds `RAnalPlugin.thumb` to scan code for ARM Thumb mode-switch hints. • Adds `r_anal_xrefs_setf` API for a ~3% analysis speedup by avoiding redundant function lookups. • Exposes typed function context with params, stack slots, and base types. • Imports C rewrite of the `gopcintab` plugin. • Adds support for NDS32 ELF relocations. • Supports more v850 relocations. • Extends Swift demangler with additional abbreviation tables and conformance entries. • Adds buffer-baked functions in `r_magic` and restores magic file baked APIs with performance improvements. • Implements `r_print_code_indent` for C-like code indentation via `~:}`. • Adds initial generic support for camel syntax in the assembler. • Automatic scrolling and panning out of screen in menubars panel. • Formats `uf2://` IO plugin and adds new device family entries. • Adds GitHub Actions CI and FilC compilation artifacts. • Installs to `lib64` on Fedora/RHEL/SUSE. Breaking changes: • `RCore.cmdCall` is renamed to `RCore.call`; any plugin or script referencing `RCore.cmdCall` will break. • `R_CORE_LOADLIBS_ALL` is renamed to `R_LIB_LOAD_ALL`; code using the old constant will fail to compile. • `r_anal_archinfo` is removed in favor of `r_arch_info`; callers of `r_anal_archinfo` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.1.2

Thu, 19 Mar 2026 12:34:50 GMT

Radare2 6.1.2 adds Python pseudo-disassembly, new type inspection commands, BrainFuck pseudo plugin, and expanded analysis configurability. • Adds initial Python pseudo-disassembler plugin for decompiling Python bytecode. • Adds `bf.pseudo` plugin for BrainFuck pseudo-disassembly. • Implements `ah=` command to copy instruction details into analysis hints. • Adds `anal.vars.maxframe` and `anal.vars.maxbbsize` config vars for fine-grained variable analysis limits. • Adds `graph.bb.maxsize` option to cap basic block size rendered in call/function graphs. • Adds `prj.new` config option to use new project file formats. • Implements `tf-` command to delete function type definitions. • Implements `tfv` command to view function arguments and their offsets. • Adds `anal.types.xrefs` config var to enable cross-reference tracking for the `tv` type commands. • Shows xrefs for function signature definitions via `tfv`. • Adds `RBinInfo.uncaps` field to expose non-encapsulated symbols from binary parsers. • Adds missing CSSLOT code signature slot types for Mach-O parsing. • Merges `pz` and `p=` subcommand capabilities. • Adds `r2r -1` as an alias for `-j1` single-threaded test runs. • Adds user plugin support in `rafs2`. • Supports copying to directory and handles errors in the `cp` shell command. • Initial support for `$$..XXX` addressing syntax in core. • Renames `anal.types.*` config vars to `types.*` namespace. • Adds lazy-loading and caching of types to speed up startup. • Includes line number and type name in type parsing failure messages. • Supports parsing variadic arguments in function pointers. • Supports parsing forward struct declarations. Breaking changes: • The `anal.types.*` config variables are renamed to `types.*`; any scripts or configs using the old names will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.1.0

Tue, 17 Feb 2026 11:02:48 GMT

Radare2 6.1.0 adds DRCOV trace import, source-line breakpoints, ARM64 native breakpoints, new string commands, SREC format, and more. • Adds plugin to import execution traces from DRCOV logs into the analysis pipeline. • Adds `anal.jmptbl.split` option to experimentally resolve missing jump table cases. • Adds `anal.jmp.pair` option to flatten consecutive inverse branch anti-disassembly tricks. • Adds `afnq` command as a refactored helper for function naming. • Implements `asm.pseudo` plugin for .NET CIL disassembly pseudo-syntax. • Adds camelcase disassembly syntax support. • Adds ARC pseudo plugin with updated opcode descriptions and updated ARC disassembler from binutils 2026. • Adds `izzc` and `izzzc` commands to count raw strings. • Implements `izjq` and its alias `izqj` for combined JSON/quiet string output. • Adds `iz+` command and extends `iz-` command to accept length and type arguments. • Adds count and pagination support to `iz` string listing commands. • Adds support for ARM64 GLOB_DAT ELF relocation types. • Supports Apple C4000 Baseband firmware (gns1) format in the binary plugin. • Adds support for records and invokedynamic in the Java binary parser. • Adds support for ACC_HIDDEN Java classes. • Supports non-ARM bflt executables. • Exposes more native relocation types and the reloc type for REL binaries. • Implements native breakpoints support for XNU/ARM64 in the debugger. • Adds source-line breakpoints support in the debugger. • Implements printing of FPU registers for Linux ARM/ARM64. • Adds SREC file format support in the IO layer. • Adds `mlx` command to list deleted files for FAT filesystems. • Adds sandbox guards for `zip://` IO plugin. • Adds `wx+` nibble writes that no longer depend on block size. • Extends x86 FPU emulation support in ESIL. • Supports overlapped strings in the disassembly listing. • Supports MDMP RTM revision version information exposure from minidumps. • Adds support for CIL/Mono detection extended to exe/dll. • Imports function signatures and type definitions from DWARF debug info. • Extends `iH` command to return a string and permit multiple formats. • Supports initial third-party plugin builds. • Replaces bundled libzip+zlib with otezip, reducing codebase by ~55kLOC. • Reduces DEX binary loading memory usage by ten times. • Adds `r_io_bank_get_regions` to speed up `io.unalloc` operations. • Adds `rahash2 -R sdb` output support. • Documents and enforces nibble mask search in `rafind2`. • Adds `rafind2` file filtering by rbin info. • Supports custom text output for RMuta ssdeep/entropy plugins. • Creates unified RMuta.crc plugin covering all 22 supported CRC variants. • Ports sha384 and sha512 into RMuta hash framework. • Supports subtypes in muta plugins, combining rol/ror variants. • Moves `p2` and `p3` commands into `pri2`/`pri3`. • Honors `cfg.bigendian` in `cv` commands. Breaking changes: • The `r_bin_command` function is renamed to `r_bin_cmd`. • `RAnalCmd` now returns a string instead of bool, changing the API contract for callers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.0.8

Tue, 30 Dec 2025 13:45:36 GMT

Radare2 6.0.8 adds .NET/CIL support, Apple Filesystem, new partition formats, register rainbow coloring, and coredump improvements. • Adds initial CIL (Common Intermediate Language) disassembler and assembler for .NET PE assembly analysis. • Implements working support for .NET PE assemblies including `.types` for the PDB plugin and a new `RBin.pdb` plugin. • Adds Apple FileSystem (APFS) support including reading files in APFS mountpoints and retrieving file sizes. • Adds GPT partition table support. • Adds BSD DiskLabel partition support. • Adds APM (PMAP) Apple Classic partition support. • Adds EBR partition support alongside existing MBR support. • Implements `dga` command to coredump all memory maps. • Adds register rainbow coloring via the `scr.rainwbow.regs` option. • Adds `asm.cmt.strings` option to disable pointer strings in operation comments. • Implements `tap://` IO plugin for reading SimH tape images. • Adds support for reading pipe/FIFO files with r2 <(command) process substitution syntax. • Supports AT&T syntax in x86 disassembly and ESIL generation. • Implements `@@@m:perm` foreach operator in the shell for iterating over maps by permission. • Implements `typedef union` and `enum` parsing in the KVC types parser. • Adds `${pal:}` themed color support in `scr.prompt.format`. • Adds `scr.vprompt.format` option for visual mode prompt formatting. • Implements `rasm2 -LL` to list parse plugins. • Adds `-hh` extended help flag for `rabin2` and `rasm2`. • Adds JSON output support to `rafs2`. • Adds `R2_DOCDIR` and `R2PM_DOCDIR` environment variables. • Colorizes permission fields in `iS`, `dm`, `dmm`, and `om` commands. • Implements `bin.str.align` option to discard unaligned strings. • Adds HTTP session registration APIs. • Supports binary data downloads via `RSocket.get`. • Enables raw IO by default. • Heavily refactors and improves the Z80 plugin including assembler and disassembler. • Exposes rbin metadata for .NET in disassembly output. Breaking changes: • The `a2f` core plugin is removed; its functionality is now part of the `anal` component directly. • The blaze analysis has been converted from a core plugin into an analysis plugin. • `pf2` is removed; `pf` is now the unified print format command. • ESIL chevron shift operators are replaced with `LSL`, `LSR`, `ASR`, `ROL`. • Raw IO is enabled by default (`rawio`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.0.6

Sun, 23 Nov 2025 10:49:59 GMT

radare2 6.0.6 adds BFS filesystem support, :tls debug commands, JSON output for /s, and scr.prompt.format • Initial support for the BeOS Filesystem (BFS) with automagic detection and Miknight Commander (mmc) dual-panel file manager • Adds `:tls` command in `mach://` and `w32dbg` io plugins to print thread info address • Adds `cfg.regnums` setting (default `false`) to read register values via `rnum` instead of name • Supports JSON output for the `/s` (string search) command • Initial implementation of `scr.prompt.format` with `${relto}`, `${e:EVAR}`, `vaddr`, `paddr`, and `r:reg` handlers • Adds `cfg.newpf` setting to run `pf2` instead of `pf` for print formats • Adds `wvg` command and `cfg.float` config to write custom float values • Initial implementation of minimal pseudo support for EVM (Ethereum Virtual Machine) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.0.4

Sat, 27 Sep 2025 18:26:09 GMT

Radare2 6.0.4 adds sBPF analysis, VAX/SNES/MSP430 pseudo-disasm, MobiCore/XNU IOKit support, r2agent session listing, and dozens of new assembler instructions. • New sBPF (Solana BPF) analysis plugin with Rust string resolution, ESIL modelling, and ELF binary detection • Adds `a:path` analysis plugin (initial import) • New `snes.pseudo` ASM plugin for Super Nintendo disassembly • New pseudocode plugin for VAX architecture • New MSP430 pseudo-disassembler plugin (initial implementation) • Adds `process_vm` IO plugin for process memory access • Implements XNU IOKit class carving and adds core IOKit types • Initial support for MobiCore MCLF binary format (fixes #14879) • Supports assembling extended BPF64 instructions and integrates BPF assembler into the Capstone plugin • Implements ST/LD classic BPF instruction assembly • Adds `ldm`/`stm` support for ARM32 assembler • Adds `pld` prefetch load for ARM32 assembler • Adds `umlal` and extended `msr` constructions for ARM32 assembler • Adds `mrs` instruction support in the ARM assembler • Implements `crc32`, `rdrand`, and `rdseed` for x86 assembler • Adds `lzcnt`, `tzcnt`, and `popcnt` for x86-64 assembler • Expands M68K assembler support with more instructions (fixes #21211) • Adds `r2agent -L` to list current remote sessions • Registers remote sessions when using r2agent • Implements `R_IO_SEEK_HOLE` for IO layer • New `asm.imm.base` config variable for controlling immediate base display • Implements `r_flag_closest_with_prefix` API and API for nearest flag inside a flagspace • Initial implementation of autoflagspaces • Adds `R2_DEBUG_NOLANG` environment variable to suppress RLang plugin loading • Adds `r2 -H R2_MANDIR` to print the man directory path • Adds new math operators and sub-expression support for negation operators in the shell • Indexes `__objc_msgrefs` xrefs and parses `_selrefs` for Objective-C metadata • Stores `rawname` in `RFlagItem` and exposes it from `RBinName` • Adds `RBinClass` instance size and type name fields • Adds support for HTTP POST on `/cmd` and r2pipe client APIs over HTTP • Implements `tfc` command without arguments to list all type function callbacks • Supports mangled/demangled names in zignatures • Implements `vmatrix` visual mode (initial import) • Initial real threaded Core tasks support; aliases `fg`/`bg`/`jobs` for task management • Adds VAX ELF reloc 21 support • Supports dynamic function prefixes in analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.0.2

Tue, 12 Aug 2025 15:47:19 GMT

Radare2 6.0.2 adds hexfile:// URI handler, RXML DOM API, temporary block modifiers, and F-key shell shortcuts. • Adds `hexfile://` URI handler for opening hex-encoded files directly. • Supports `R_X86_64_RELATIVE` and `R_AARCH64_RELATIVE` ELF relocation types for improved binary analysis. • Introduces `@xc:` and `@xf:` temporary block modifiers for scoped analysis commands. • Adds F-key (function key) shortcut support in the radare2 shell. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 6.0.0

Wed, 30 Jul 2025 01:00:43 GMT

Radare2 6.0.0 introduces afv*/afvd*, abm, pds*, iSm/ies commands, debuginfod support, and new analysis flags. • Adds `afv*` and `afvd*` subcommands for listing analysis plugins with function and variable event wiring • Adds `pds*` command to add comments for emulated strings • Adds `emu.maxsize` config option to allow ESIL emulation to scan large memory sections • Adds `debuginfod` support to download DWARF debug files via the `writedwarf` plugin • Adds `iSm` and `ies` commands for mapping symbols in sections and accessing entrypoint symbols respectively • Adds `rasm2 -L [arch]` flag to show detailed information for a specific architecture plugin Breaking changes: • `RBinDbgItem` is renamed to `RBinAddrline` • RLang.list() is deprecated • `core->offset` is renamed to `core->addr` • `RFlagItem.offset` is renamed to `RFlagItem.addr` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.9.8

Tue, 19 Nov 2024 12:08:32 GMT

Radare2 5.9.8 adds new analysis commands, crypto plugins, search ops, and visual bit-editor enhancements. • Adds `aflmr` command to list all recursive functions in the binary. • Adds `aflmu` command to list each function call exactly once (deduplication). • Adds `afln` command to list all function names. • Makes `afvt` work with a single parameter to display a variable's type. • Adds recursive-call information to `afi` function info output. • Adds `parse.pickle` plugin for disassembly of Python pickle opcodes. • Adds `gb.pseudo` plugin for Game Boy pseudo-disassembly. • Adds `/abf` command to search for loops within the current function. • Adds `/h*` search variant and normalises `/h` behaviour to match other search commands. • Adds `asm.cmt.pseudo` config option to show pseudo-code in disassembly comments. • Adds `asm.cmt.wrap` config option to suppress right-side comment wrapping on long lines. • Adds `e+` command to persistently set config variables in `r2rc`. • Adds `-e log.level` support for string-valued log levels. • Adds `r2 -1` flag to redirect stderr into stdout. • Adds `stdouterr` directive to rarun2 for unified output capture. • Adds SipHash and bech32 encoding/decoding to the crypto plugin suite. • Adds SM4 master-key display and offset reporting on hits in search. • Adds `iic` subcommands for listing unique cross-references and classifying imports by category. • Improves `iS` table queries with sha1/sort/inc and entropy columns. • Supports table queries for strings via `iz,` and for classes via `ic,`. • Supports `@%` syntax for reading shell variables in expressions. • Adds yank/paste support in the visual bit editor (`Vd1`). • Adds endian-swap operation in the visual bit editor. • Adds `Vd1!` to toggle all bits in the selected byte. • Adds word-size concept and multi-byte increment/decrement (`Vd1[+-]`) in the visual bit editor. • Adds XDG cache directory support exposed via `dir.cache` for annotations. • Adds new project core plugin with save/restore of comments and `prj.files` support. • Adds initial LZ4 compression implementation to the util library. • Imports ImHex charset definitions into the print/pattern subsystem. • Includes calling-convention information in `pdc` pseudo-decompiler output. • Handles `base64:` prefix in `#!-e` scripting expressions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.9.6

Sun, 13 Oct 2024 10:54:38 GMT

Radare2 5.9.6 adds Dalvik disassembler, m68k assembler, Capstone6 arch support, new search commands, crypto ops, and shell improvements. • New Dalvik disassembler contributed by NowSecure for Android bytecode analysis. • Assembler support added for m68k architecture. • Capstone6 support for PowerPC, MIPS, and ARM64. • New `/xn` command to search for repeated byte patterns. • New `/xv[s]` command to search for value arrays. • New `/V` value range support added to rafind2. • New `ano` command to manage function annotations. • Adds `poE` and `poD` crypto commands. • Adds ed25519 private key search capability. • Adds CRC search to magic. • New `test` command with `-s`, `-f`, `-x`, and `-d` flags. • New `@@f` alias for `@@c:afla` to iterate over functions in inverse recursive order. • New `f-0x`, `f-?`, and related flag removal commands. • Adds `io.mapinc` config variable for IO map control. • Adds `scr.prompt.prj` config to display project name in the prompt. • New dark theme: gruvbox. • Exposes `scr.color` via `R2_COLOR` environment variable. • Adds `-e cmd.exit` option to run commands before leaving r2. • New `-A` and `-H` shell commands. • Detects Dart ELFs and supports fixed x27 as global pointer reference on Dart binaries. • Detects VisionOS binaries. • Support for jump table constructions for ARM64 (Swift binaries). • Support tail addresses in `pdua..`. • Implements `pfb` bitfield printing improvements in C, ASCII art, and oneliner formats. • Horizontal scrolling with Ctrl+wheel in graph and visual modes. • Makes `-p`/`-P` project commands available directly from the r2 shell. • Generic pseudo disassembly for non-supported architectures. • Adds `scr.css` and `scr.css.prefix` config options for HTML output customization. • Initial implementation of HTTP sessions. • xmm registers added for FreeBSD debugger. • FPU registers st0–st7 and mm0–mm7 added for FreeBSD debugger. • Hardware breakpoints (`hwbp`) used by default on mac-x64. • Renames `bin.demangle.libs` to `bin.demangle.pfxlib` for clarity. • Summarized variable listing enabled by default (`asm.var.summary=4`). Breaking changes: • The `ia` command is replaced by `iA`; `ia` is deprecated. • `bin.demangle.libs` is renamed to `bin.demangle.pfxlib`. • `r2pm -HH` is removed; use `r2pm -H` (without argument) instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.9.4

Thu, 08 Aug 2024 14:38:25 GMT

Radare2 5.9.4 adds UXN/UF2/s390x/STM8 support, Ed25519 crypto, jump table analysis, project history, and dozens of new commands. • Adds initial support for the UXN virtual machine architecture. • Adds initial support for the UF2 file format in the IO layer. • Adds initial support for native debugger on Linux/s390x. • Adds initial support for STM8 pseudo-decompilation. • Adds initial support for MIPS jump tables via `anal.jmp.tbl`. • Adds initial support for Ed25519 signature verification in the crypto layer. • Adds `anal.flagends` option to stop function analysis when flags are encountered. • Adds `anal.emu` option to run `aaef`/`aef` emulation passes inside `aaa`/`af`. • Adds `anal.fixed.*` settings (including `anal.fixed.arch` and `anal.fixed.bits`) to lock architecture and bits during analysis. • Adds `iclc` command to list classes from binary info. • Exposes ELF hash algorithm via `rahash2 -a elf`. • Adds `ig` command to guess binary size. • Supports resizing the BSS section with `rabin2 -O`. • Implements `prj.history` to save and load per-project command history. • Adds `fD` command to filter and mangle flag names. • Adds `!!` for session history and `!.` for history save in the shell. • Adds `-D` as an alias for `iD` in the shell. • Adds JSON support to the `iD` command. • Adds `rax2 -q` for quiet output when printing hexdumps. • Adds `r2.cmd2[j]` APIs for r2js scripting. • Adds initial support for base64-encoded r2js scripts. • Adds `R2_PAPI_SCRIPT` environment variable for custom r2papi testing. • Adds `r_base32` encode/decode APIs. • Adds RBin.attr(str2bits) for binary attribute parsing. • Implements `RBinPlugin` commands in the new ABI via the `i:` interface. • Adds `dir.sourcebase` newabi setting and faster `bin.dbginfo` on macOS. • Adds magic file detection for Flutter binaries. • Supports glob matching in `/ad` (search for assembly patterns). • Adds `Csp` meta type for Pascal strings. • Adds `phl`/`phL` as aliases for `Lh`. • Adds `?iu` command for a one-liner custom UI. • Adds Bit Registers panel in visual mode. • Implements menu separators, project and analysis options in panels. • Adds `sfence.vma` instruction support for RISC-V disassembly. • Adds SMI (small integer) anal hints support in disasm via `ahi`. • Adds `double` type support in RTable. • Supports multiline RCons.message() output. • Adds curl POST support in the socket layer. • Adds `r2r -H` flag and honors `R2R_JOBS` environment variable as a replacement for `-j`. • Adds initial implementation of r2pipe2. • Adds il2cpp metadata importer as an r2js script. • Adds Visual Studio MAP file parser script. • Creates sections for dyldcache stub islands. • Adds `iP` and `:iF` commands to dsc for authenticated pointer and cache info. • Makes `anal.vinfun` false by default, reducing noise in variable analysis. • Renames `ib` as `ooi`. Breaking changes: • The `ib` command is renamed to `ooi`; scripts using `ib` will break. • `iSm` is no longer a valid command (was previously accepted but did nothing). • `ihh` and `iHH` aliases are removed. • `anal.vinfun` default changed to `false`; setups relying on the previous default `true` behaviour will see different variable analysis output. • `radiff2 -A` now runs `aa` instead of `aaa`; workflows relying on full `aaa` analysis via `-A` will need to adjust. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.9.2

Mon, 20 May 2024 23:35:15 GMT

Radare2 5.9.2 adds `wcd` for patch diffing, `wcd` project save/load, and `r2js` CTAGS support. • Add `wcd` command for patch diffing instruction and sort `wc?` lines • Add `-P` flag to `r2 project save` and error code on project load • Initial import of the tags.r2.js script (CTAGS support) via `r2js` Breaking changes: • The `rax2` flags `-L`, `-I`, `-B`, `-l`, `-X`, `-i`, and `=` have been renamed to `-X`, `-i`, `-z`, `-Z`, `-H`, `-C`, and `-b ` respectively. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.9.0

Sun, 31 Mar 2024 15:33:30 GMT

Radare2 5.9.0 adds `anfl`, `aoba`, `aovv`, `afba`, `aax`, `aaex`, `abj`, `abe` and backtrace (`abt`) commands for new analysis workflows. • Adds `anfl` command to restore the old autoname functionality via the `anal.slow` config var • Adds `aax` command to create a function on each CALL xref • Adds `aaex` command to analyze external references without analyzing any function • Adds `abe` command to manipulate RAnalBlock.esil • Adds backtrace API and commands via `abt` prefix for initial support of backtracing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.8.8

Thu, 08 Jun 2023 14:20:52 GMT

Radare2 5.8.8 adds ahb-* analysis, asm.bytes.asbits, r2pm -t for timeless packages and CSS string search • Adds `ahb-*` commands for Hopper-style analysis (new capabilities) • Adds `asm.bytes.asbits=true` config key to display instruction bits in binary format • Adds `r2pm -t` flag to manage 'timeless' packages • Implements `Css` (section string scan) and `Csz` commands, allowing keyword-less searches Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.8.6

Fri, 05 May 2023 21:06:48 GMT

Radare2 5.8.6 adds dtj (debug traces in JSON), cgfa (graph diff), wao nop/RISC-V support, zip0:// handler, and piE/aeom commands. • Adds `dtj` command to list debug traces in JSON format • Adds `cgfa` command for initial implementation of graph function analysis (GFA) diffing • Adds `wao nop` subcommand to write NOP sleds in RISC-V instructions • Adds `zip0://` URI handler for io plugin access • Adds `piE` command for byte-oriented print output, like `pie` but for bytes instead of ops • Adds `aeom` command to show memory refs via emulation • Implements support for LE/BE 24 bit registers in the register subsystem Breaking changes: • The arch.arm plugin is renamed to 'arch.arm.nz' Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.8.4

Tue, 14 Mar 2023 22:11:59 GMT

Radare2 5.8.4 adds `aarr`, `Pz[ie]`, `wget`, io-write-cache, and NIM scripting via QJS • Adds the `aarr` command to re-analyze all function references in one go • Introduces `io-write-cache` command for initial implementation of write caching • Adds `Pz[ie]` commands to import or export projects in zip format • Adds the `wget` command to download files directly from http:// within radare2 • Adds support for NIM scripting on top of the QJS engine via the r_arch plugin interface Full history on Cyber Toolchain: https://cybertoolchain.io/tools/radare2

Radare2 5.8.2

Mon, 23 Jan 2023 11:23:58 GMT

Radare2 5.8.2 adds Plan 9 support, rasm2 .extern directive, and pvp/wvp pointer commands. • Adds `dpt.` command to print the current selected process in debug mode • Adds `-j` CLI alias for `js:` to run QuickJS scripts (e.g., `r2 -je