Debugger/radare2

Radare2 디버깅 커맨드

우와해커 2020. 1. 7. 16:56

Radare2 디버깅

 

radare2 -d [파일명]: 디버거 모드 오픈
radare2 -w [파일명]: 쓰기 모드 오픈


| o [file] open [file] file in read-only
| o+ [file] open file in read-write mode
| on [file] 0x4000 map raw file at 0x4000 (no r_bin involved)

| oo[?] reopen current file (kill+fork in debugger)
| ood 현재파일 디버거 모드로 재실행

 

- 비쥬얼 모드

toggl breakpoints with F2
single-step with F7 (s)
step-over with F8 (S)
continue with F9


- 커맨드 모드
| db Add breakpoint
| db - Remove breakpoint
| dbj~{}

| dc Continue execution
| dcc Continue until call (use step into)
| dco Step over instructions
| dcr Continue until ret (uses step over)
| dcu[?] [..end|addr] ([end]) Continue until address (or range)

| af: function Analysis

 

- 패털모드

1. Menu items accessible by pressing m or clicking.
You can use your arrows once you’ve activated the menu. (Or use vim navigation h, j, k, and l).

2. You can see that the interface supports multiple tabs.
Each tab can have a different layout. You can enter the tab mode using t.

3. You can see the stack on the next panel.
Remember you can edit the command being run on the panel by pressing e.
for example sometimes change it to pxQ 128@ rsp to display the stack for 64 bits in a clearer way for me

Be careful where you click on the interface. Don’t use the mouse to “select” (or switch) a panel (use tab to change panels)

One of the most useful commands for the panels is e, where you can change the command being run on the panel.
And finally, you can close a panel by pressing X (capital X).

'Debugger > radare2' 카테고리의 다른 글

Disassembling_with_radare2  (0) 2020.01.03
Radare2 강의와 치트시트  (0) 2020.01.03
THC2018  (0) 2020.01.02
A journey into Radare 2 – Part 2: Exploitation (미완료)  (0) 2020.01.02
How to make radare2 work for a large binary?  (0) 2020.01.02