portugalfuturista/rizin
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Colorify rz-ax -h (#5413)

Browse source 
* Colorify `rz-ax -h`
* Hardcode `rz-find` binary name
This commit is contained in:
Khairul Azhar Kasmiran 2025-09-27 16:24:11 +08:00 committed by GitHub
parent 5cbab45fd8
commit a60c32b46e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 538 additions and 191 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
librz/include/rz_util/rz_print.h
View file

@ -234,7 +234,10 @@ RZ_API RZ_OWN char *rz_print_json_indent(RZ_NULLABLE const char *s, bool color,
RZ_API char *rz_print_json_human(const char *s);
RZ_API RZ_OWN RzStrBuf *rz_print_colorize_asm_str(RZ_BORROW RzPrint *p, const RzAsmTokenString *toks);
RZ_API void rz_print_colored_help_option(const char *option, const char *arg, const char *description, size_t maxOptionAndArgLength);
RZ_API void rz_print_colored_help_option(const char *flag, const char *arg, const char *desc,
size_t maxFlagAndArgLength);
RZ_API void rz_print_colored_help_option_example(RZ_NULLABLE const char *flag, RZ_NULLABLE const char *arg,
const char *desc, size_t maxFlagAndArgLength, RZ_NULLABLE const char *example, size_t maxDescLength);
#endif
#ifdef __cplusplus

131
librz/main/rz-ax.c
View file

@ -188,57 +188,86 @@ static void print_ascii_table(void) {
}
static int help(void) {
printf(
"Usage: rz-ax [options] [expr ...]\n"
"If expr is not provided, reads from stdin\n"
" int -> hex ; rz-ax 10\n"
" hex -> int ; rz-ax 0xa\n"
" -int -> hex ; rz-ax -77\n"
" -hex -> int ; rz-ax 0xffffffb3\n"
" int -> bin ; rz-ax b30\n"
" int -> ternary ; rz-ax t42\n"
" bin -> int ; rz-ax 1010d\n"
" ternary -> int ; rz-ax 1010dt\n"
" float -> hex ; rz-ax 3.33f\n"
" hex -> float ; rz-ax Fx40551ed8\n"
" oct -> hex ; rz-ax 35o\n"
" hex -> oct ; rz-ax Ox12 (O is a letter)\n"
" bin -> hex ; rz-ax 1100011b\n"
" hex -> bin ; rz-ax Bx63\n"
" ternary -> hex ; rz-ax 212t\n"
" hex -> ternary ; rz-ax Tx23\n"
" raw -> hex ; rz-ax -S < /binfile\n"
" hex -> raw ; rz-ax -s 414141\n"
" =base ; rz-ax =10 0x46 -> output in base 10\n"
" -l ; append newline to output (for -E/-D/-r/..\n"
" -a show ascii table ; rz-ax -a\n"
" -b bin -> str ; rz-ax -b 01000101 01110110\n"
" -B str -> bin ; rz-ax -B hello\n"
" -d force integer ; rz-ax -d 3 -> 3 instead of 0x3\n"
" -e swap endianness ; rz-ax -e 0x33\n"
" -D base64 decode ;\n"
" -E base64 encode ;\n"
" -f floating point ; rz-ax -f 6.3+2.1\n"
" -F stdin slurp code hex ; rz-ax -F < shellcode.[c/py/js]\n"
" -h show this help ; rz-ax -h\n"
" -i dump as C byte array ; rz-ax -i < bytes\n"
" -I IP address <-> LONG ; rz-ax -I 3530468537\n"
" -k keep base ; rz-ax -k 33+3 -> 36\n"
" -L bin -> hex(bignum) ; rz-ax -L 111111111 # 0x1ff\n"
" -n int value -> hexpairs; rz-ax -n 0x1234 # 34120000\n"
" -o octalstr -> raw ; rz-ax -o \\162 \\172 # rz\n"
" -N binary number ; rz-ax -N 0x1234 # \\x34\\x12\\x00\\x00\n"
" -r rz style output ; rz-ax -r 0x1234\n"
" -s hexstr -> raw ; rz-ax -s 43 4a 50\n"
" -S raw -> hexstr ; rz-ax -S < /bin/ls > ls.hex\n"
" -t Unix tstamp -> str ; rz-ax -t 1234567890\n"
" -m MS-DOS tstamp -> str ; rz-ax -m 1234567890\n"
" -W Win32 tstamp -> str ; rz-ax -W 1234567890\n"
" -x hash string ; rz-ax -x linux osx\n"
" -u units ; rz-ax -u 389289238 # 317.0M\n"
" -w signed word ; rz-ax -w 16 0xffff\n"
" -v version ; rz-ax -v\n"
" -p position of set bits ; rz-ax -p 0xb3\n");
printf(Color_CYAN "Usage:" Color_RESET " rz-ax [options] [expr ...]\n"
"If expr is not provided, reads from stdin\n");
#define CF Color_GREEN
#define CA Color_YELLOW
#define CR Color_RESET
const char *options[] = {
// clang-format off
NULL, NULL, "int -> hex", "rz-ax 10",
NULL, NULL, "hex -> int", "rz-ax 0xa",
NULL, NULL, "-int -> hex", "rz-ax -77",
NULL, NULL, "-hex -> int", "rz-ax 0xffffffb3",
NULL, NULL, "int -> bin", "rz-ax b30",
NULL, NULL, "int -> ternary", "rz-ax t42",
NULL, NULL, "bin -> int", "rz-ax 1010d",
NULL, NULL, "ternary -> int", "rz-ax 1010dt",
NULL, NULL, "float -> hex", "rz-ax 3.33f",
NULL, NULL, "hex -> float", "rz-ax Fx40551ed8",
NULL, NULL, "oct -> hex", "rz-ax 35o",
NULL, NULL, "hex -> oct", "rz-ax Ox12 (O is a letter)",
NULL, NULL, "bin -> hex", "rz-ax 1100011b",
NULL, NULL, "hex -> bin", "rz-ax Bx63",
NULL, NULL, "ternary -> hex", "rz-ax 212t",
NULL, NULL, "hex -> ternary", "rz-ax Tx23",
NULL, NULL, "raw -> hex", "rz-ax " CF "-S" CR " < /binfile",
NULL, NULL, "hex -> raw", "rz-ax " CF "-s" CR " 414141",
"=", "\bbase", "", "rz-ax " CF "=" CA "10" CR " 0x46 -> output in base 10",
"-l", "", "", "append newline to output (for " CF "-E" CR "/" CF "-D" CR "/" CF "-r" CR "/..",
"-a", "", "show ascii table", "rz-ax " CF "-a" CR "",
"-b", "", "bin -> str", "rz-ax " CF "-b" CR " 01000101 01110110",
"-B", "", "str -> bin", "rz-ax " CF "-B" CR " hello",
"-d", "", "force integer", "rz-ax " CF "-d" CR " 3 -> 3 instead of 0x3",
"-e", "", "swap endianness", "rz-ax " CF "-e" CR " 0x33",
"-D", "", "base64 decode", NULL,
"-E", "", "base64 encode", NULL,
"-f", "", "floating point", "rz-ax " CF "-f" CR " 6.3+2.1",
"-F", "", "stdin slurp code hex", "rz-ax " CF "-F" CR " < shellcode.[c/py/js]",
"-h", "", "show this help", "rz-ax " CF "-h" CR "",
"-i", "", "dump as C byte array", "rz-ax " CF "-i" CR " < bytes",
"-I", "", "IP address <-> LONG", "rz-ax " CF "-I" CR " 3530468537",
"-k", "", "keep base", "rz-ax " CF "-k" CR " 33+3 -> 36",
"-L", "", "bin -> hex(bignum)", "rz-ax " CF "-L" CR " 111111111 # 0x1ff",
"-n", "", "int value -> hexpairs", "rz-ax " CF "-n" CR " 0x1234 # 34120000",
"-o", "", "octalstr -> raw", "rz-ax " CF "-o" CR " \\162 \\172 # rz",
"-N", "", "binary number", "rz-ax " CF "-N" CR " 0x1234 # \\x34\\x12\\x00\\x00",
"-r", "", "rz style output", "rz-ax " CF "-r" CR " 0x1234",
"-s", "", "hexstr -> raw", "rz-ax " CF "-s" CR " 43 4a 50",
"-S", "", "raw -> hexstr", "rz-ax " CF "-S" CR " < /bin/ls > ls.hex",
"-t", "", "Unix tstamp -> str", "rz-ax " CF "-t" CR " 1234567890",
"-m", "", "MS-DOS tstamp -> str", "rz-ax " CF "-m" CR " 1234567890",
"-W", "", "Win32 tstamp -> str", "rz-ax " CF "-W" CR " 1234567890",
"-x", "", "hash string", "rz-ax " CF "-x" CR " linux osx",
"-u", "", "units", "rz-ax " CF "-u" CR " 389289238 # 317.0M",
"-w", "", "signed word", "rz-ax " CF "-w" CR " 16 0xffff",
"-v", "", "version", "rz-ax " CF "-v" CR "",
"-p", "", "position of set bits", "rz-ax " CF "-p" CR " 0xb3",
// clang-format on
};
#undef CF
#undef CA
#undef CR
size_t maxFlagAndArgLength = 0;
size_t maxDescLength = 0;
for (int i = 0; i < RZ_ARRAY_SIZE(options); i += 4) {
size_t flagLength = options[i] ? strlen(options[i]) : 0;
size_t argLength = options[i + 1] ? strlen(options[i + 1]) : 0;
size_t totalFlagAndArgLength = flagLength + argLength;
if (totalFlagAndArgLength > maxFlagAndArgLength) {
maxFlagAndArgLength = totalFlagAndArgLength;
}
size_t descLength = strlen(options[i + 2]);
if (descLength > maxDescLength) {
maxDescLength = descLength;
}
}
for (int i = 0; i < RZ_ARRAY_SIZE(options); i += 4) {
if (i + 1 < RZ_ARRAY_SIZE(options)) {
rz_print_colored_help_option_example(options[i], options[i + 1], options[i + 2],
maxFlagAndArgLength, options[i + 3], maxDescLength);
}
}
return true;
}

2
librz/main/rz-find.c
View file

@ -191,7 +191,7 @@ static void print_bin_string(RzBinFile *bf, RzBinString *string, PJ *pj) {
static int show_help(const char *argv0, int line) {
printf("%s%s%s", Color_CYAN, "Usage: ", Color_RESET);
printf("%s [-mXnzZhqv] [-a align] [-b sz] [-f/t from/to] [-[e|s|w|S|I] str] [-x hex] -|file|dir ..\n", argv0);
printf("rz-find [-mXnzZhqv] [-a align] [-b sz] [-f/t from/to] [-[e|s|w|S|I] str] [-x hex] -|file|dir ..\n");
if (line) {
return 0;
}

74
librz/util/print.c
View file

@ -1456,16 +1456,66 @@ RZ_API RZ_OWN RzStrBuf *rz_print_colorize_asm_str(RZ_BORROW RzPrint *p, const Rz
return out;
}
// Prints a help option with the option/arg strings colorized and aligned to a max length.
RZ_API void rz_print_colored_help_option(const char *option, const char *arg, const char *description, size_t maxOptionAndArgLength) {
size_t optionWidth = strlen(option);
size_t maxSpaces = maxOptionAndArgLength + 2;
printf(Color_GREEN " %-.*s" Color_RESET, (int)optionWidth, option);
size_t remainingSpaces = maxSpaces - optionWidth;
if (RZ_STR_ISNOTEMPTY(arg)) {
printf(Color_YELLOW " %-s " Color_RESET, arg);
remainingSpaces -= strlen(arg) + 2;
}
printf("%-*.*s", (int)remainingSpaces, (int)remainingSpaces, "");
printf(Color_RESET "%s\n", description);
/**
* \brief Prints a help option with the option flag and arg strings colorized, and description aligned to a column.
*
* \param flag Option flag, will be colored green.
* \param arg Option arg, will be colored yellow.
* \param desc Option description, will be aligned in the third column.
* \param maxFlagAndArgLength Width of column containing \p flag and \p arg. It needs to be calculated beforehand
* as the max over all options.
*/
RZ_API void rz_print_colored_help_option(const char *flag, const char *arg, const char *desc,
size_t maxFlagAndArgLength) {
rz_return_if_fail(flag && arg && desc);
rz_print_colored_help_option_example(flag, arg, desc, maxFlagAndArgLength, NULL, 0);
}
/**
* \brief Prints a help option with example, with the option flag and arg strings colorized, and both description and
* example aligned to columns.
*
* \param flag Option flag, will be colored green.
* \param arg Option arg, will be colored yellow.
* \param desc Option description, will be aligned in the third column unless both \p flag and \p arg are NULL. If so,
* it will be aligned at the first column.
* \param maxFlagAndArgLength Width of column containing \p flag and \p arg. It needs to be calculated beforehand
* as the max over all options.
* \param example Optional option example, will be aligned in a column after the description and prefixed with "; ".
* \param maxDescLength Width of column containing \p desc. It needs to be calculated beforehand as the max over all
* descriptions.
*/
RZ_API void rz_print_colored_help_option_example(RZ_NULLABLE const char *flag, RZ_NULLABLE const char *arg,
const char *desc, size_t maxFlagAndArgLength, RZ_NULLABLE const char *example, size_t maxDescLength) {
rz_return_if_fail(desc);
bool desc_start = !flag && !arg;
size_t maxOptSpaces = maxFlagAndArgLength + 2;
printf(" ");
if (!desc_start) {
if (!flag) {
flag = "";
}
if (!arg) {
arg = "";
}
printf(Color_GREEN "%s" Color_RESET, flag);
size_t remainingSpaces = maxOptSpaces - strlen(flag);
if (RZ_STR_ISNOTEMPTY(arg)) {
printf(Color_YELLOW " %s " Color_RESET, arg);
remainingSpaces -= strlen(arg) + 2;
if (arg[0] == '\b') {
remainingSpaces += 2;
}
}
printf("%*s", (int)remainingSpaces, "");
}
printf(Color_RESET "%s", desc);
if (example) {
size_t maxDescSpaces = (desc_start ? maxOptSpaces : 0) + maxDescLength;
size_t remainingSpaces = maxDescSpaces - strlen(desc);
printf("%*s ; %s", (int)remainingSpaces, "", example);
}
printf("\n");
}

517
test/db/tools/rz
View file

@ -236,139 +236,404 @@ RUN
NAME=<program> -h
FILE=--
CMDS=<<EOF
!rizin -h
echo
!rz-ax -h
echo
!rz-hash -h
(help prog; !${prog} -h; echo)
..(help rizin rz-asm rz-ax rz-bin rz-diff rz-find rz-gg rz-hash rz-run rz-sign)
!!rz-test -h~:..-1
EOF
EXPECT=<<EOF
Usage: rizin [-ACdfLMnNqStuvwzX] [-P patch] [-p prj] [-a arch] [-b bits] [-i file]
[-s addr] [-B baddr] [-m maddr] [-c cmd] [-e k=v] file|pid|-|--|=
 -- Run rizin without opening any file
 = Same as 'rizin malloc://512'
 -  Read file from stdin
 -= Perform R=! command to run all commands remotely
 -0 Print \x00 after init and every command
 -1 Redirect stderr to stdout
 -2 Close stderr file descriptor (silent warning messages)
 -a arch  Set asm.arch
 -A Run 'aaa' command to analyze all referenced code
 -b bits  Set asm.bits
 -B baddr  Set base address for PIE binaries
 -c 'cmd..' Execute rizin command
 -C File is host:port (alias for -cR+http://%%s/cmd/)
 -d Debug the executable 'file' or running process 'pid'
 -D backend Enable debug mode (e cfg.debug=true)
 -e k=v  Evaluate config var
 -f Block size = file size
 -F binplug Force to use that rbin plugin
 -h, -hh Show help message, -hh for long
 -H [var]  Display variable
 -i file  Run script file
 -I file  Run script file before the file is opened
 -k OS/kern Set asm.os (linux, macos, w32, netbsd, ...)
 -l lib  Load plugin file
 -L List supported IO plugins
 -m addr  Map file at given address (loadaddr)
 -M Do not demangle symbol names
 -n, -nn Do not load RzBin info (-nn only load bin structures)
 -N Do not load user settings and scripts
 -NN Do not load any script or plugin
 -q Quiet mode (no prompt) and quit after -i and -c
 -qq Quiet mode (no prompt) and force quit
 -p p.rzdb  Load project file
 -r rz-run  Specify rz-run profile to load (same as -e dbg.profile=X)
 -R rule  Specify custom rz-run directive
 -s addr  Initial seek
 -T Do not compute file hashes
 -u Set bin.filter=false to get raw sym/sec/cls names
 -v, -V Show rizin version (-V show lib versions)
 -w Open file in write mode
 -x Open without exec-flag (asm.emu will not work), See io.exec
 -X Same as -e bin.usextr=false (useful for dyldcache)
 -z, -zz Do not load strings or load them even in raw
-- Run rizin without opening any file
= Same as 'rizin malloc://512'
-  Read file from stdin
-= Perform R=! command to run all commands remotely
-0 Print \x00 after init and every command
-1 Redirect stderr to stdout
-2 Close stderr file descriptor (silent warning messages)
-a arch  Set asm.arch
-A Run 'aaa' command to analyze all referenced code
-b bits  Set asm.bits
-B baddr  Set base address for PIE binaries
-c 'cmd..' Execute rizin command
-C File is host:port (alias for -cR+http://%%s/cmd/)
-d Debug the executable 'file' or running process 'pid'
-D backend Enable debug mode (e cfg.debug=true)
-e k=v  Evaluate config var
-f Block size = file size
-F binplug Force to use that rbin plugin
-h, -hh Show help message, -hh for long
-H [var]  Display variable
-i file  Run script file
-I file  Run script file before the file is opened
-k OS/kern Set asm.os (linux, macos, w32, netbsd, ...)
-l lib  Load plugin file
-L List supported IO plugins
-m addr  Map file at given address (loadaddr)
-M Do not demangle symbol names
-n, -nn Do not load RzBin info (-nn only load bin structures)
-N Do not load user settings and scripts
-NN Do not load any script or plugin
-q Quiet mode (no prompt) and quit after -i and -c
-qq Quiet mode (no prompt) and force quit
-p p.rzdb  Load project file
-r rz-run  Specify rz-run profile to load (same as -e dbg.profile=X)
-R rule  Specify custom rz-run directive
-s addr  Initial seek
-T Do not compute file hashes
-u Set bin.filter=false to get raw sym/sec/cls names
-v, -V Show rizin version (-V show lib versions)
-w Open file in write mode
-x Open without exec-flag (asm.emu will not work), See io.exec
-X Same as -e bin.usextr=false (useful for dyldcache)
-z, -zz Do not load strings or load them even in raw
Usage: rz-ax [options] [expr ...]
Usage: rz-asm [-ACdDehLBvw] [-a arch] [-b bits] [-m plugin] [-o addr] [-s syntax]
[-f file] [-F fil:ter] [-i skip] [-l len] 'code'|hex|-
-a arch  Set architecture to assemble/disassemble (see -L)
-A Show Analysis information from given hexpairs
-b bits  Set cpu register size (8, 16, 32, 64) (RZ_ASM_BITS)
-B Binary input/output (-l is mandatory for binary input)
-c cpu  Select specific CPU (depends on arch)
-C Output in C format
-d, -D Disassemble from hexpair bytes (-D show hexpairs)
-e Use big endian instead of little endian
-I Display lifted RzIL code (same input as in -d, IL is also validated)
-E Display ESIL expression (same input as in -d)
-f file  Read data from file
-F in:out  Specify input and/or output filters (att2intel, x86.pseudo, ...)
-h, -hh Show this help, -hh for long
-i len  Ignore N bytes of the input buffer
-j Output in JSON format
-k kernel  Select operating system (linux, windows, darwin, ..)
-l len  Input/Output length
-L List Asm plugins: (a=asm, d=disasm, A=analyze, e=ESIL, I=RzIL)
-m plugin  List supported CPUs for the chosen plugin
-o, -@ addr Set start address for code (default 0)
-O file  Output file name (rz-asm -Bf a.asm -O a)
-p Run SPP over input for assembly
-q Quiet mode
-r Output in rizin commands
-s syntax  Select syntax (intel, att)
-v Show version information
-x Use hex dwords instead of hex pairs when assembling.
-w Describe opcode
If '-l' value is greater than output length, output is padded with nops
If the last argument is '-' reads from stdin
Environment:
RZ_ARCH e asm.arch # architecture to assemble/disassemble (same as rz-asm -a)
RZ_ASM_ARCH # architecture to assemble/disassemble (same as rz-asm -a)
RZ_ASM_BITS # cpu register size (8, 16, 32, 64) (same as rz-asm -b)
RZ_BITS e asm.bits # cpu register size (8, 16, 32, 64) (same as rz-asm -b)
RZ_DEBUG # if defined, show error messages and crash signal
RZ_NOPLUGINS # do not load shared plugins (speedup loading)
Usage: rz-ax [options] [expr ...]
If expr is not provided, reads from stdin
int -> hex ; rz-ax 10
hex -> int ; rz-ax 0xa
-int -> hex ; rz-ax -77
-hex -> int ; rz-ax 0xffffffb3
int -> bin ; rz-ax b30
int -> ternary ; rz-ax t42
bin -> int ; rz-ax 1010d
ternary -> int ; rz-ax 1010dt
float -> hex ; rz-ax 3.33f
hex -> float ; rz-ax Fx40551ed8
oct -> hex ; rz-ax 35o
hex -> oct ; rz-ax Ox12 (O is a letter)
bin -> hex ; rz-ax 1100011b
hex -> bin ; rz-ax Bx63
ternary -> hex ; rz-ax 212t
hex -> ternary ; rz-ax Tx23
raw -> hex ; rz-ax -S < /binfile
hex -> raw ; rz-ax -s 414141
=base ; rz-ax =10 0x46 -> output in base 10
-l ; append newline to output (for -E/-D/-r/..
-a show ascii table ; rz-ax -a
-b bin -> str ; rz-ax -b 01000101 01110110
-B str -> bin ; rz-ax -B hello
-d force integer ; rz-ax -d 3 -> 3 instead of 0x3
-e swap endianness ; rz-ax -e 0x33
-D base64 decode ;
-E base64 encode ;
-f floating point ; rz-ax -f 6.3+2.1
-F stdin slurp code hex ; rz-ax -F < shellcode.[c/py/js]
-h show this help ; rz-ax -h
-i dump as C byte array ; rz-ax -i < bytes
-I IP address <-> LONG ; rz-ax -I 3530468537
-k keep base ; rz-ax -k 33+3 -> 36
-L bin -> hex(bignum) ; rz-ax -L 111111111 # 0x1ff
-n int value -> hexpairs; rz-ax -n 0x1234 # 34120000
-o octalstr -> raw ; rz-ax -o \162 \172 # rz
-N binary number ; rz-ax -N 0x1234 # \x34\x12\x00\x00
-r rz style output ; rz-ax -r 0x1234
-s hexstr -> raw ; rz-ax -s 43 4a 50
-S raw -> hexstr ; rz-ax -S < /bin/ls > ls.hex
-t Unix tstamp -> str ; rz-ax -t 1234567890
-m MS-DOS tstamp -> str ; rz-ax -m 1234567890
-W Win32 tstamp -> str ; rz-ax -W 1234567890
-x hash string ; rz-ax -x linux osx
-u units ; rz-ax -u 389289238 # 317.0M
-w signed word ; rz-ax -w 16 0xffff
-v version ; rz-ax -v
-p position of set bits ; rz-ax -p 0xb3
int -> hex ; rz-ax 10
hex -> int ; rz-ax 0xa
-int -> hex ; rz-ax -77
-hex -> int ; rz-ax 0xffffffb3
int -> bin ; rz-ax b30
int -> ternary ; rz-ax t42
bin -> int ; rz-ax 1010d
ternary -> int ; rz-ax 1010dt
float -> hex ; rz-ax 3.33f
hex -> float ; rz-ax Fx40551ed8
oct -> hex ; rz-ax 35o
hex -> oct ; rz-ax Ox12 (O is a letter)
bin -> hex ; rz-ax 1100011b
hex -> bin ; rz-ax Bx63
ternary -> hex ; rz-ax 212t
hex -> ternary ; rz-ax Tx23
raw -> hex ; rz-ax -S < /binfile
hex -> raw ; rz-ax -s 414141
= base   ; rz-ax =10 0x46 -> output in base 10
-l  ; append newline to output (for -E/-D/-r/..
-a show ascii table ; rz-ax -a
-b bin -> str ; rz-ax -b 01000101 01110110
-B str -> bin ; rz-ax -B hello
-d force integer ; rz-ax -d 3 -> 3 instead of 0x3
-e swap endianness ; rz-ax -e 0x33
-D base64 decode
-E base64 encode
-f floating point ; rz-ax -f 6.3+2.1
-F stdin slurp code hex ; rz-ax -F < shellcode.[c/py/js]
-h show this help ; rz-ax -h
-i dump as C byte array ; rz-ax -i < bytes
-I IP address <-> LONG ; rz-ax -I 3530468537
-k keep base ; rz-ax -k 33+3 -> 36
-L bin -> hex(bignum) ; rz-ax -L 111111111 # 0x1ff
-n int value -> hexpairs ; rz-ax -n 0x1234 # 34120000
-o octalstr -> raw ; rz-ax -o \162 \172 # rz
-N binary number ; rz-ax -N 0x1234 # \x34\x12\x00\x00
-r rz style output ; rz-ax -r 0x1234
-s hexstr -> raw ; rz-ax -s 43 4a 50
-S raw -> hexstr ; rz-ax -S < /bin/ls > ls.hex
-t Unix tstamp -> str ; rz-ax -t 1234567890
-m MS-DOS tstamp -> str ; rz-ax -m 1234567890
-W Win32 tstamp -> str ; rz-ax -W 1234567890
-x hash string ; rz-ax -x linux osx
-u units ; rz-ax -u 389289238 # 317.0M
-w signed word ; rz-ax -w 16 0xffff
-v version ; rz-ax -v
-p position of set bits ; rz-ax -p 0xb3
Usage: rz-bin [-AcdeEghHiIjlLMqrRsSUvVxzZ] [-@ at] [-a arch] [-b bits] [-B addr]
[-C F:C:D] [-f str] [-m addr] [-n str] [-N m:M] [-P pdb]
[-o str] [-O str] [-k query] [-D lang symname] file
-@ [addr]  Show section, symbol, or import at the given address
-A List sub-binaries and their arch-bits pairs
-a [arch]  Set arch (x86, arm, .. or <arch>_<bits>)
-b [bits]  Set bits (32, 64 ...)
-B [addr]  Override base address (pie bins)
-c List classes
-cc List classes in header format
-C [fmt:C:D]  Create [elf,mach0,pe] with Code and Data hexpairs (see -a)
-d Show debug/dwarf information
-dd Load debug/dwarf information from debuginfod server
-D lang name  Demangle symbol name (-D all for bin.demangle=true)z
-e Entrypoint
-ee Constructor/destructor entrypoints
-E Globally exportable symbols
-f [mach]  Select sub-binary for the machine [mach].
-F [binfmt]  Force to use that bin plugin (ignore header check)
-g Same as -SMZIHVResizcld -SS -SSS -ee (show all info)
-G [addr]  Load address . offset to header
-h Show this help
-H Header fields
-i Import (symbols imported from libraries)
-I Binary info
-j Output in JSON
-k [sdb-query]  Run sdb query. for example: '*'
-K [algo]  Calculate checksums (md5, sha1, ..)
-l Linked libraries
-L [plugin]  List supported bin plugins or plugin details
-m [addr]  Show source line at addr
-M Main (show address of main symbol)
-n [str]  Show section, symbol or import named str
-N [min:max]  Force min:max number of chars per string (see -z and -zz)
-o [str]  Output file/folder for write operations (out by default)
-O [str]  Write/extract operations (-O help)
-p Show physical addresses
-P Show debug/pdb information
-PP Download pdb file for binary
-q Quiet mode, just show fewer data
-qq Show less info (no offset/size for -z for ex.)
-Q Show load address used by dlopen (non-aslr libs)
-r Show output in rizin format
-R Show relocations
-s Symbols
-S Sections
-SS Segments
-SSS Sections mapping to segments
-T Display file signature
-u Unfiltered (no rename duplicated symbols/sections)
-U Resources
-v Show version information
-V Show binary version information
-w Display try/catch blocks
-x Extract bins contained in file
-X [fmt] [f] .. Package in fat or zip the given files and bins contained in file
-Y [fw file]  Calculate all the possibles base address candidates of a firmware bin
-z Show strings (from data section)
-zz Show strings (from raw strings from bin)
-zzz Dump raw strings to stdout (for huge files)
-Z Guess size of binary program
Environment:
RZ_BIN_CODESIGN_VERBOSE: # make code signatures verbose
RZ_BIN_DEBUGINFOD_URLS: e bin.dbginfo.debuginfod_urls # use alternative debuginfod server
RZ_BIN_DEMANGLE=0: e bin.demangle # do not demangle symbols
RZ_BIN_LANG: e bin.lang # assume lang for demangling
RZ_BIN_MAXSTRBUF: e search.str.max_length # specify maximum buffer size
RZ_BIN_PDBSERVER: e pdb.server # use alternative PDB server
RZ_BIN_PREFIX: e bin.prefix # prefix symbols/sections/relocs with a specific string
RZ_BIN_STRFILTER: e bin.str.filter # rizin -qc 'e bin.str.filter=??' -
RZ_BIN_STRPURGE: e bin.str.purge # try to purge false positives
RZ_BIN_SYMSTORE: e pdb.symstore # path to downstream PDB symbol store
RZ_CONFIG: # config file
RZ_NOPLUGINS: # do not load plugins
Usage: rz-diff [options] <file0> <file1>
-a [arch] Specify architecture plugin to use (x86, arm, ..)
-b [bits] Specify register size for arch (16 (thumb), 32, 64, ..)
-d [algo] Compute edit distance based on the chosen algorithm:
  myers | Eugene W. Myers' O(ND) algorithm (no substitution)
  leven | Levenshtein O(N^2) algorithm (with substitution)
  ssdeep | Context triggered piecewise hashing comparison
-i Use command line arguments instead of files (only for -d)
-H Hexadecimal visual mode
-h Show this help
-j JSON output
-q Quite output
-V Show version information
-v Be more verbose (stderr output)
-e [k=v]  Set an evaluable config variable
-A Compare virtual and physical addresses
-B Run 'aaa' when loading the bin
-C Disable colors
-T Show timestamp information
-S [WxH]  Set the width and height of the terminal for visual mode
-0 [cmd]  Input for file0 when option -t 'commands' is given.
 The same value will be set for file1, if -1 is not set.
-1 [cmd]  Input for file1 when option -t 'commands' is given.
-t [type] Compute the difference between two files based on its type:
  bytes | compare raw bytes in the files (only for small files)
  lines | compare text files
  functions | compare functions found in the files
  | optional -0 <fcn name|offset> to compare only one function
  classes | compare classes found in the files
  command | compare command output returned when executed in both files
  | require -0 <cmd> and -1 <cmd> is optional
  entries | compare entries found in the files
  fields | compare fields found in the files
  graphs | compare 2 functions and outputs in graphviz/dot format
  | require -0 <fcn name|offset> and -1 <fcn name|offset> is optional
  imports | compare imports found in the files
  libraries | compare libraries found in the files
  sections | compare sections found in the files
  strings | compare strings found in the files
  symbols | compare symbols found in the files
palette colors can be changed by adding the following lines
inside the $HOME/.rizinrc file
ec diff.unknown blue | offset color
ec diff.match green | match color
ec diff.unmatch red | mismatch color
Usage: rz-find [-mXnzZhqv] [-a align] [-b sz] [-f/t from/to] [-[e|s|w|S|I] str] [-x hex] -|file|dir ..
-a [align] Only accept aligned hits
-b [size]  Set block size
-e [regex] Search for regex matches (can be used multiple times)
-E [cmd]  Execute command for each file found
-f [from]  Start searching from address 'from'
-F [file]  Read the contents of the file and use it as keyword
-h Show this help
-i Identify filetype (rizin -nqcpm file)
-j Output in JSON
-m Magic search, file-type carver
-M [str]  Set a binary mask to be applied on keywords
-n Do not stop on read errors
-r Print using rizin commands
-s [str]  Search for a specific string (can be used multiple times)
-w [str]  Search for a specific wide string (can be used multiple times). Assumes str is UTF-8.
-I [str]  Search for an entry in import table.
-S [str]  Search for a symbol in symbol table.
-t [to]  Stop search at address 'to'
-q Quiet - do not show headings (filenames) above matching contents (default for searching a single file)
-v Show version information
-x [hex]  Search for hexpair string (909090) (can be used multiple times)
-X Show hexdump of search results
-z Search for zero-terminated strings
-Z Show string found on each search hit
Usage: rz-gg [-FOLsrxhvz] [-a arch] [-b bits] [-k os] [-o file] [-I path]
[-i sc] [-e enc] [-B hex] [-c k=v] [-C file] [-p pad] [-q off]
[-S string] [-f fmt] [-nN dword] [-dDw off:hex] file|f.asm|-
-a [arch]  Select architecture (x86, mips, arm)
-b [bits]  Set Register size (32, 64, ..)
-B [hexpairs]  Append some hexpair bytes
-c [k=v]  Set configuration options
-C [file]  Append contents of file
-d [off:dword] Patch dword (4 bytes) at given offset
-D [off:qword] Patch qword (8 bytes) at given offset
-e [encoder]  Use specific encoder. see -L
-f [format]  Output format (raw, c, pe, elf, mach0, python, javascript)
-F Output native format (osx=mach0, linux=elf, ..)
-h Show this help
-i [shellcode] Include shellcode plugin, uses options. see -L
-I [path]  Add include path
-k [kernel]  Operating system's kernel (linux,bsd,osx,w32)
-L List all plugins (shellcodes and encoders)
-n [dword]  Append 32bit number (4 bytes)
-N [dword]  Append 64bit number (8 bytes)
-o [file]  Output file
-O Use default output file (filename without extension or a.out)
-p [padding]  Add padding after compilation (padding=n10s32)
 ntas : begin nop, trap, 'a', sequence
 NTAS : same as above, but at the end
-P [size]  Prepend debruijn sequence of given length
-q [fragment]  Debruijn pattern offset
-r Show raw bytes instead of hexpairs
-s Show assembler
-S [string]  Append a string
-v Show version information
-w [off:hex]  Patch hexpairs at given offset
-x Execute
-X [hexpairs]  Execute rop chain, using the stack provided
-z Output in C string syntax
Usage: rz-hash [-vhBkjLq] [-b S] [-a A] [-c H] [-E A] [-D A] [-s S] [-x S] [-f O] [-t O] [files|-] ...
 -v Show version information
 -h Show this help
 - Input read from stdin instead from a file
 -a algo  Hash algorithm to use and you can specify multiple ones by
  Appending a comma (example: sha1,md4,md5,sha256)
 -B Output the calculated value for each block
 -b size  Set the block size
 -c value  Compare calculated value with a given one (hexadecimal)
 -e endian Set the endianness (default: 'big' accepted: 'big' or 'little')
 -D algo  Decrypt the given input; use -S to set key and -I to set IV (if needed)
 -E algo  Encrypt the given input; use -S to set key and -I to set IV (if needed)
 -f from  Start the calculation at given offset
 -t to  Stop the calculation at given offset
 -I iv  Set the initialization vector (IV)
 -i times  Repeat the calculation N times
 -j Output the result as a JSON structure
 -k Output the calculated value using openssh's randomkey algorithm
 -L List all algorithms
 -q Set quiet mode (use -qq to get only the calculated value)
 -S seed  Set the seed for -a, use '^' to append it before the input, use '@'
  Prefix to load it from a file and '-' from read it
 -K key  Set the hmac key for -a and the key for -E/-D, use '@' prefix to
  Load it from a file and '-' from read it
  From stdin (you can combine them)
 -s string Input read from a zero-terminated string instead from a file
 -x hex  Input read from a hexadecimal value instead from a file
  
  All the input (besides -s/-x/-c) can be hexadecimal or strings
  If 's:' prefix is specified
-v Show version information
-h Show this help
- Input read from stdin instead from a file
-a algo  Hash algorithm to use and you can specify multiple ones by
 Appending a comma (example: sha1,md4,md5,sha256)
-B Output the calculated value for each block
-b size  Set the block size
-c value  Compare calculated value with a given one (hexadecimal)
-e endian Set the endianness (default: 'big' accepted: 'big' or 'little')
-D algo  Decrypt the given input; use -S to set key and -I to set IV (if needed)
-E algo  Encrypt the given input; use -S to set key and -I to set IV (if needed)
-f from  Start the calculation at given offset
-t to  Stop the calculation at given offset
-I iv  Set the initialization vector (IV)
-i times  Repeat the calculation N times
-j Output the result as a JSON structure
-k Output the calculated value using openssh's randomkey algorithm
-L List all algorithms
-q Set quiet mode (use -qq to get only the calculated value)
-S seed  Set the seed for -a, use '^' to append it before the input, use '@'
 Prefix to load it from a file and '-' from read it
-K key  Set the hmac key for -a and the key for -E/-D, use '@' prefix to
 Load it from a file and '-' from read it
 From stdin (you can combine them)
-s string Input read from a zero-terminated string instead from a file
-x hex  Input read from a hexadecimal value instead from a file
 
 All the input (besides -s/-x/-c) can be hexadecimal or strings
 If 's:' prefix is specified
Usage: [directives] [script.rz] [--] [program] [args]
-h Show this help
-l Show profile options
-t Output template profile
-v Show version information
-w Wait for incoming terminal process
-- [program] [args] Run commands
Usage: rz-sign [options] [file]
-h Show this help
-a [-a]  Add extra 'a' to analysis command (available only with -o option)
-e [k=v]  Set an evaluable config variable (available only with -o option)
-c [output.pat] [input.sig] Parse a FLIRT signature and convert it to its other format
-o [output.sig] [input.bin] Perform an analysis on the binary and generate the FLIRT signature
-d [flirt.sig]  Parse a FLIRT signature and dump its content
-q Quiet mode
-v Show version information
Examples:
rz-sign -d signature.sig
rz-sign -c new_signature.pat old_signature.sig
rz-sign -o libc.sig libc.so.6
Usage: rz-test [-qvVnL] [-j threads] [test file/dir | @test-type]
-h Show this help
-v Show version information
-q Quiet mode
-V Be verbose
-i Interactive mode
-y Accept all interactive changes
-n Do nothing (don't run any test, just load/parse them)
-L Log mode (better printing for CI, logfiles, etc.)
-F [dir] Run fuzz tests (open and default analysis) on all files in the given dir
-j [threads] How many threads to use for running tests concurrently (default is 8)
-r [rizin] Path to rizin executable (default is rizin)
-m [rz-asm] Path to rz-asm executable (default is rz-asm)
-f [file] File to use for JSON tests (default is bins/elf/crackme0x00b)
-C [dir] Chdir before running rz-test (default follows test pathname/cwd)
-t [seconds] Timeout per test (default is 960 seconds)
-o [file] Output test run information in JSON format to file
-e [dir] Exclude a particular directory while testing (this option can appear many times)
-s [num] Number of expected successful tests
-x [num] Number of expected failed tests
Supported test types: @json @unit @fuzz @cmds
EOF
RUN