// arsenal·Forensics & REAdvancedFOSS

Radare2/r2/

CLI-first reverse engineering framework — vimlike commands, massive feature set.

Forensics & RE

$ radare2 --help

Radare2

// what it is

Description

pancake's open-source RE framework. Steep learning curve; immense capability. Cutter is the official GUI built on top of it.

// use cases

// commands

Open + analyze

$ r2 -A ./binary

List functions

$ [0x...]> afl

Print main function

$ [0x...]> pdf @main

// facts

// links

// related in Forensics & RE

Open-source memory-forensics framework — reads RAM images and reconstructs system state.

Open-source digital-forensics GUI on top of The Sleuth Kit.

Exterro's free disk-imaging utility — the de facto standard for forensic disk capture.