1RZ_BIN(1) BSD General Commands Manual RZ_BIN(1)
2
4 RZ_BIN — Binary program info extractor
5
7 rz-bin [-AceghHiIsSMzlpRrLxvhqQTuUwV] [-a arch] [-b bits] [-B addr]
8 [-C fmt:C:[D]] [-D lang sym|-] [-f subbin] [-k query] [-K algo]
9 [-O binop] [-o str] [-m addr] [-@ addr] [-n str] [-X fmt file ...]
10 file
11
13 This program allows you to get information about ELF/PE/MZ and CLASS
14 files in a simple way.
15
16 All those commandline flags are also available under the i command in
17 rizin. Type i? for help.
18
19 -@ addr Show information (symbol, section, import) of the given
20 address
21
22 -A List sub-binaries and their associated arch-bits pairs
23
24 -a arch Set arch (x86, arm, .. accepts underscore for bits x86_32)
25
26 -b bits Set bits (32, 64, ...)
27
28 -B addr Override baddr
29
30 -c List classes
31
32 -cc List classes in header format
33
34 -C [fmt:C[:D]]
35 Create [elf,mach0,pe] for arm and x86-32/64 tiny binaries
36 where 'C' is an hexpair list of the code bytes and ':D' is an
37 optional concatenation to describe the bytes for the data
38 section.
39
40 -d Show debug/dwarf information
41
42 -D lang symbolname|-
43 Demangle symbol name (or - to read from stdin) for lang (cxx,
44 swift, java, cxx, ..)
45
46 -e Show entrypoints for disk and on-memory
47
48 -ee Show constructor/destructors (extended entrypoints)
49
50 -f subbin Select sub-binary architecture. Useful for fat-mach0 binaries
51
52 -F binfmt Force to use that bin plugin (ignore header check)
53
54 -g Show all possible information
55
56 -G addr Load address . offset to header
57
58 -h Show usage help message.
59
60 -H Show header fields (see ih command in rizin)
61
62 -I Show binary info (iI in rizin)
63
64 -i Show imports (symbols imported from libraries) (ii)
65
66 -j Output in json
67
68 -k query Perform SDB query on loaded file
69
70 -K algo Select a rz-hash checksum algorithm to be performed on sec‐
71 tions listing (and maybe others in the future) i.e 'rz-bin -K
72 md5 -S /bin/ls'
73
74 -l List linked libraries to the binary
75
76 -L List supported bin plugins
77
78 -M Show address of 'main' symbol
79
80 -m addr Show source line reference from a given address
81
82 -N minlen:maxlen
83 Force minimum and maximum number of chars per string (see -z
84 and -zz). if (strlen>minlen && (!maxlen || strlen<=maxlen))
85
86 -n str Show information (symbol, section, import) at string offset
87
88 -o str Output file/folder for write operations (out by default)
89
90 -O binop Perform binary operation on target binary (dump, resize,
91 change sections, ...) see '-O help' for more information
92
93 -p Disable VA. Show physical addresses
94
95 -P Show debug/pdb information
96
97 -PP Download pdb file for binary
98
99 -q Be quiet, just show fewer data
100
101 -qq Show less info (no offset/size for -z for ex.)
102
103 -Q Show load address used by dlopen (non-aslr libs)
104
105 -r Show output in rizin format
106
107 -R Show relocations
108
109 -s Show exported symbols
110
111 -S Show sections
112
113 -SS Show segments
114
115 -t Show file hashes
116
117 -T Show Certificates
118
119 -u Unfiltered (no rename duplicated symbols/sections)
120
121 -U Show Resources
122
123 -v Show version information
124
125 -V Show binary version information
126
127 -w Show try/catch blocks
128
129 -x Extract all sub binaries from a fat binary (f.ex: fatmach0)
130
131 -X format file ...
132 Package a fat or zip containing all the files passed (fat,
133 zip)
134
135 -z Show strings inside .data section (like gnu strings does)
136
137 -Z Guess size of binary program
138
139 -zz Shows strings from raw bins
140
141 -zzz Dump raw strings to stdout (for huge files)
142
144 RZ_BIN_LANG same as rizin -e bin.lang for rz-bin
145
146 RZ_BIN_DEMANGLE demangle symbols
147
148 RZ_BIN_MAXSTRBUF same as rizin -e bin.maxstrbuf for rz-bin
149
150 RZ_BIN_DEBASE64 try to decode all strings as base64 if possible
151
152 RZ_BIN_STRFILTER same as rizin -e bin.str.filter for rz-bin
153
154 RZ_BIN_STRPURGE same as rizin -e bin.str.purge for rz-bin
155
157 List symbols of a program
158
159 $ rz-bin -s a.out
160
161 Get offset of symbol
162
163 $ rz-bin -n _main a.out
164
165 Get entrypoint
166
167 $ rz-bin -e a.out
168
169 Load symbols and imports from rizin
170
171 $ rizin -n /bin/ls
172 [0x00000000]> .!rz-bin -prsi $FILE
173
175 rz-hash(1), rz-find(1), rizin(1), rz-diff(1), rz-asm(1), rz-ax(1),
176 rsc2(1), rz-gg(1), rz-run(1),
177
179 Written by pancake <pancake@nopcode.org>.
180
181 Sep 29, 2016