> For the complete documentation index, see [llms.txt](https://blog.conspirator.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.conspirator.io/tools/untitled.md).

# radare2 personal cheatsheet

```
r2 -w ./file # open file for patching
```

### Main Commands

* **aaa**  -  analyze everything
* **pdf function / pd 20 @function** - print disassembly at function
* **s 0x4000** - seek address /s+ s- for relative seek
* **VV @function** - Enter Graph View at function
* **iz** - print strings
* **@** - use for temporary seek
* **\~**  - like grep
* **px** - print hexdump
* **ia** - info all
* **wa** - write assembly
* **afl** - list functions
* **axt \[offset]** -  find xrefs
* **/ \[string]** - search strings
* **o** - work with file descriptors
* **afta** - analyze local variable types

### Visual Modes

* **V** - Enter Normal Visual mode
* **VV** - Enter Graph View
* **V!** - Enter Panel View
* **A** - patch at current address
* **p** - rotate print mode
* **:** - open command line

### Tricks

* append **j** to a command for json output
* append **\~{}** to command for json pretty print
* use pipe **|** with shell commands
* use **>** to pipe outputs to file
* **wx 9090** - write nop at current address
* use initialization scripts to do the basic startup tasks

### Customization

* **eco** - colorschemes, e.g. **eco darkda**
* **e scr.utf8 = true**
* **e scr.utf8.curvy=true**

### Debugger

* **r2 -d ./file**
* **db 0x0000** - breakpoint at 0x0000
* **dc** - run
* **ds** - step
* **dcs** - continue until syscall
* **dd** - manipulate file descriptors
* **dr eax=5** - manipulate reg value
* **s** - step (visual)
* **S** - step, not into calls (visual)

<https://radare.gitbooks.io/radare2book/debugger/migration.html>