cutter v1.4 (Radare with GUI )

Nisy

Cutter ：https://github.com/radareorg/cutter
Download：https://github.com/radareorg/cutter/releases

A Qt and C++ GUI for radare2 reverse engineering framework



Radare: http://radare.org/r/index.html
（Radare为命令行操作界面）

Radare is a portable reversing framework that can...

• Disassemble (and assemble for) many different architectures
• Debug with local native and remote debuggers (gdb, rap, webui, r2pipe, winedbg, windbg)
• Run on Linux, *BSD, Windows, OSX, Android, iOS, Solaris and Haiku
• Perform forensics on filesystems and data carving
• Be scripted in Python, Javascript, Go and more
• Support collaborative analysis using the embedded webserver
• Visualize data structures of several file types
• Patch programs to uncover new features or fix vulnerabilities
• Use powerful analysis capabilities to speed up reversing
• Aid in software exploitation
  

之前的那款 iaito 看介绍以及更名为 cutter 了：
https://github.com/hteso/iaito
This project has been moved to: https://github.com/radareorg/cutter


.

飘云

这玩意用好了不比IDA差，

Nisy

测试了字符串搜索，注释、flag、交叉引用这些，有些操作会导致界面假死，但是没有崩溃，总体上要比旧版本好很多。



命令行把 radare 的都copy 过来了。

1. 
   
2. [0x0040d6a0]> ?
   
3. Usage: [.][times][cmd][~grep][@[@iter]addr!size][|>pipe] ; ...
   
4. Append '?' to any char command to get detailed help
   
5. Prefix with number to repeat command N times (f.ex: 3x)
   
6. |%var =valueAlias for 'env' command
   
7. | *[?] off[=[0x]value]    Pointer read/write data/values (see ?v, wx, wv)
   
8. | (macro arg0 arg1)       Manage scripting macros
   
9. | .[?] [-|(m)|f|!sh|cmd]  Define macro or load r2, cparse or rlang file
   
10. | =[?] [cmd]              Send/Listen for Remote Commands (rap://, http://, <fd>)
    
11. | <[...]                  Push escaped string into the RCons.readChar buffer
    
12. | /[?]                    Search for bytes, regexps, patterns, ..
    
13. | ![?] [cmd]              Run given command as in system(3)
    
14. | #[?] !lang [..]         Hashbang to run an rlang script
    
15. | a[?]                    Analysis commands
    
16. | b[?]                    Display or change the block size
    
17. | c[?] [arg]              Compare block with given data
    
18. | C[?]                    Code metadata (comments, format, hints, ..)
    
19. | d[?]                    Debugger commands
    
20. | e[?] [a[=b]]            List/get/set config evaluable vars
    
21. | f[?] [name][sz][at]     Add flag at current address
    
22. | g[?] [arg]              Generate shellcodes with r_egg
    
23. | i[?] [file]             Get info about opened file from r_bin
    
24. | k[?] [sdb-query]        Run sdb-query. see k? for help, 'k *', 'k **' ...
    
25. | L[?] [-] [plugin]       list, unload load r2 plugins
    
26. | m[?]                    Mountpoints commands
    
27. | o[?] [file] ([offset])  Open file at optional address
    
28. | p[?] [len]              Print current block with format and length
    
29. | P[?]                    Project management utilities
    
30. | q[?] [ret]              Quit program with a return value
    
31. | r[?] [len]              Resize file
    
32. | s[?] [addr]             Seek to address (also for '0x', '0x1' == 's 0x1')
    
33. | S[?]                    Io section manipulation information
    
34. | t[?]                    Types, noreturn, signatures, C parser and more
    
35. | T[?] [-] [num|msg]      Text log utility
    
36. | u[?]                    uname/undo seek/write
    
37. | V                       Visual mode (V! = panels, VV = fcngraph, VVV = callgraph)
    
38. | w[?] [str]              Multiple write operations
    
39. | x[?] [len]              Alias for 'px' (print hexadecimal)
    
40. | y[?] [len] [[[@]addr    Yank/paste bytes from/to memory
    
41. | z[?]                    Zignatures management
    
42. | ?[??][expr]             Help or evaluate math expression
    
43. | ?$?                     Show available '
    
44. 
    
45. variables and aliases
    
46. | ?@?                     Misc help for '@' (seek), '~' (grep) (see ~??)
    
47. | ?>?                     Output redirection

复制代码

ZMZwise

一看又是个高大上的工具，收了，谢谢校长

cxj98

飘云 发表于 2018-6-1 11:21
这玩意用好了不比IDA差，

这个比IDA好吗？大佬录个视频教大家一下怎么用。

梦幻的彼岸

2.0版本，可选中文界面

官方更新说明：https://cutter.re/cutter-2.0