radare2

Origins as a Data-Recovery Hex Editor

radare2 traces back to 2006, when Spanish security researcher Sergi Alvarez, known as 'pancake', wrote the original radare as a small, free command-line hexadecimal editor supporting 64-bit offsets. The tool grew out of a personal need to recover deleted files from a Mac G3, and its name is reportedly derived from the first letters of 'raw', 'data', and 'recovery'.

From Hex Editor to Reverse-Engineering Framework

A rewrite begun around 2009 produced radare2 (often shortened to r2): a pluggable, library-based framework rather than a single monolithic program. Written in C and released under the LGPL, radare2 grew to support disassembly and assembly across a wide range of CPU architectures, static and dynamic analysis, binary diffing, ROP-gadget search, and a native debugger. Automation is central to the design: radare2 exposes its functionality through r2pipe, a scripting API usable from Python, JavaScript, and other languages.

Command-Line Philosophy vs. GUI-First Tools

Where commercial disassemblers like IDA Pro, and later the NSA's Ghidra, built their reputations around graphical interfaces, radare2 deliberately kept the terminal and its terse, composable commands as the primary interface. That minimal-dependency, script-first approach made radare2 attractive to reverse engineers who wanted a free tool that could be embedded into automated pipelines.

Cutter and the GUI Ecosystem

To make the framework more approachable, the community built graphical front ends on top of it, including a Qt-based interface called Cutter. In December 2020, a group of former radare2 and Cutter core developers split off a fork called Rizin, citing an unsustainable project environment; Cutter's team moved with them, and Cutter has since run on Rizin as its backend.

Adoption and Legacy

Despite that split, radare2 itself remained active and widely used, appearing repeatedly in Capture the Flag competitions and professional malware analysis, and it has been the subject of talks at security conferences including Recon, Hack.lu, and the Chaos Communication Congress. The project also spawned its own annual community conference, r2con, first held in Barcelona in 2016. radare2 endures as one of the reverse-engineering community's most enduring examples of a free, deeply scriptable alternative to expensive commercial disassembly suites.

Timeline

• 2006Sergi Alvarez ('pancake') begins the original radare project as a free command-line hexadecimal editor.
• 2009The codebase is rewritten from scratch as radare2, a pluggable, library-based reverse-engineering framework.
• 2016The first r2con community conference dedicated to radare2 is held in Barcelona.
• 2020-12-08A group of former core contributors forks radare2 into Rizin, citing an unsustainable project environment.