#radare2 — Public Fediverse posts

Thanks to r2mcp, r2ghidra and pocketmai i can start finding bugs in real binaries from my phone from anywhere, confirmed by hand, by qwen3.8 (running in local at home) and deepseek4. #radare2

r2frida 6.2.0 is out! Short release notes:

- in sync with typescript7 and r2 6.2.0
- fix some deadlocks related to breakpoints
- improved error handling and better live code patching support
- fds on darwin now resolve to origin filename

#frida #reverseengineering #radare2

https://github.com/nowsecure/r2frida/releases/tag/6.2.0

Lazy to post twice but now you can run #radare2 in your browser with jslinux on #riscv . I find it pretty convinient for teaching, testing and sandboxing reasons.

Try it: https://radare.org/jslr2
Full post https://www.linkedin.com/posts/sergi-alvarez-76632790_today-im-happy-to-present-a-new-way-to-run-activity-7491527767482716160-Rz0e

r2mcp-1.8.6 is out! https://github.com/radareorg/radare2-mcp/releases/tag/1.8.6 #radare2

M'alegra veure com una empresa de Barcelona ha pogut publicar el seu primer xip, el BER10. Es un RISC-V, dissenyat per correr Linux i accelerar tasques de IA. M'encantaria tenir acces a un d'aquests, ni que sigui per millorar el suport de RISCV per #radare2 i poder fer que tinguem hw dissenyat de km0 amb standards oberts. https://openchip.com/openchip-unveils-ber10-europes-new-sovereign-chip-is-here/

Radare2: 24 CVEs tracked, 87% unpatched. 0 CISA KEV exploited, but avg CVSS 6.67. Trust Score: C. Open source reverse engineering tool needs patching vigilance. #Radare2 #infosec #cybersecurity

https://www.valtersit.com/vendors/radare2/

After #mascon conference at @owasp I got so much feedback for the unity, hermes and flutter plugins I published, some of this feedback was in form of bug reports, so here's a bugfix release for r2hermes! https://github.com/radareorg/r2hermes/releases/tag/1.4.2 #reactnative #reverseengineering #radare2

Fight Ghidra #radare2

I am now publishing the slides of my talk at #mascon #owasp about curiosities and low level details I learned while developing the now also public plugins for Unity, Flutter and React Native for #radare2

🛝-> https://radare.org/get/r2mascon2026-vienna-mobiletriad.pdf

In case you are missing the #radare2 Quine Wars happening right now in the X site, take some 🍿 look closer to each oneliner and have fun! Who will cook the smaller one??

📺 https://xcancel.com/marioballano/status/2068782094717788600
🍔 https://xcancel.com/Seifreed/status/2069454407125643282
🧑‍🦲 https://xcancel.com/GabrielGonzalez/status/2069358419471892796#m

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

Happy to anounce a new release of r2hermes! The plugin for reverse engineering React Native apps with #radare2

In short, i've added SBOM listings, improved decompiler output, better overlapped strings support as well as much better SLP objects integration with latest radare2 from git!

https://github.com/radareorg/r2hermes/releases/tag/1.3.2

CVE Alert: CVE-2026-8696 - radare2 - radare2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-8696-radare2-radare2/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-8696 #radare2 #

You'll now get anoyingly interactive prompts to rebuild the outdated plugins on startup in #radare2

In sync with IWP2026 I added support for 9fs and fossil filesystems from #Plan9 in #radare2 https://www.youtube.com/watch?v=4-30EUHvtJY

This week i’m doing some improvements for Android support on #radare2 optimizing loading times, fixing disassembler issues, improving the r2jadx plugin..

Another little spoiler 🤫 #radare2 #OWASPConference

CVE Alert: CVE-2026-40517 - radareorg - radare2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-40517-radareorg-radare2/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-40517 #radareorg #radare2

radare2-bindings are back! Use the native APIs of #radare2 directly from Python, Go, #Vala or NodeJS/TypeScript, requires latest valabind 2.1.0 (or Swig). the vapi files has been updated to be in sync with r2-6.1.4 thanks to @AbhiTheModder for the contribs here to make that happen!

https://github.com/radareorg/radare2-bindings/releases/tag/6.1.4

CVE Alert: CVE-2026-40527 - radareorg - radare2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-40527-radareorg-radare2/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-40527 #radareorg #radare2

Iaito 6.1.4 is out! 💥

Tons of stability improvements, new widgets, userfriendly features, brings back the debugger mode, display analysis progress and background webserver ideal for r2mcp.

Full changelog https://github.com/radareorg/iaito/releases/tag/6.1.4 #reverseengineering
#radare2

Hint of the day: if your AI agent runs #radare2 oneliners, set the R2_COLOR=0 environment variable to disable colors and save a bunch of tokens!

Here’s why it’s important to always use r2 from git. In r2land, we follow the law of full disclosure and fix any reported vulnerability within a 24h deadline, as stated in SECURITY.md #radare2 https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero

“Reverse Engineering the ITE 8910 Keyboard RGB Protocol for OpenRGB” with #radare2 https://chocapikk.com/posts/2026/reverse-engineering-ite8910-keyboard-rgb/

@asher_davila just open sourced its #radare2 Python script for parsing .gopclntab and recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE across Go versions 1.2, 1.16, 1.18, and 1.20+ https://github.com/AsherDLL/r2gopclntabParser #golang #reverseengineering