wtf is radare2?

Radare2 is a free, open-source toolkit for reverse engineering, which means taking a compiled program apart to understand how it works, even when you don't have the original source code. Security researchers, malware analysts, and hobbyists use it to inspect binaries, debug running programs, disassemble machine code into human-readable instructions, and edit files at the raw hexadecimal level. It started as a scriptable command-line hex editor for forensics work and grew into a full-featured framework. At its core, it's a command-line tool written in C that lets you open almost any kind of binary file, Windows executables, macOS apps, Android packages, firmware images, even Game Boy ROMs, and analyze what's inside. You can step through a program's instructions one at a time, examine memory, search for patterns, patch bytes, and follow program logic. It supports an enormous range of processor architectures (x86, ARM, MIPS, RISC-V, and dozens more) and file formats, making it unusually versatile compared to most tools in this space. The people who reach for this tool are typically doing malware analysis (figuring out what a suspicious file does), vulnerability research (finding bugs in compiled software), or firmware reverse engineering (understanding embedded devices like routers and IoT hardware). It's also popular among capture-the-flag competitors and security educators. If you've ever wanted to know what happens inside a program after it's compiled, this is the kind of tool you'd reach for. A few things stand out about how the project works. It has its own package manager (r2pm) for installing plugins and extensions, and it can be scripted from a wide variety of languages including Python, Ruby, JavaScript, Go, and Rust, so you can automate analysis workflows. The project runs on nearly every operating system you can name, from Windows and macOS to Haiku and Solaris. It's a from-scratch rewrite of an earlier tool called radare, built as a set of reusable libraries and command-line tools rather than a single monolithic application.