Libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging and emulating binaries on Unix-like systems.
- Stars
- 4,138
- Forks
- 694
- Open issues
- 624
- Last commit
- yesterday
What is it?
Rizin is a reverse engineering framework forked from radare2, with an emphasis on usability, features and code cleanliness. It can analyze binaries, disassemble code, debug programs, serve as a forensic tool, and act as a scriptable command-line hexadecimal editor that can open disk files.
The framework covers a wide range of targets. It parses common executable formats such as ELF, Mach-O, PE and DEX, and supports dozens of CPU architectures from x86-64 and ARM to MIPS, RISC-V and many embedded and retro processors. It runs on Windows, macOS, Linux, the BSDs, Android, and several other UNIX-like systems.
Beyond the main rizin shell, the project ships standalone tools such as rz-bin for binary metadata, rz-asm for assembling and disassembling, rz-find for binary pattern search, and rz-diff for comparing binaries. Scripting access from Python, Rust, Go and other languages is available through rzpipe. It is built with meson.
Key features
- 01Disassembles and analyzes code across many CPU architectures, including x86-64, ARM64, RISC-V and MIPS.
- 02Parses executable and binary formats such as ELF, Mach-O, PE and DEX.
- 03Provides a debugger for running and inspecting programs.
- 04Includes standalone tools like rz-bin, rz-asm, rz-find and rz-diff for use in shell scripts.
- 05Offers a scriptable command-line hex editor that opens disk files.
- 06Supports scripting from Python, Rust, Go and other languages via rzpipe.
Use cases
- Reverse engineering unknown binaries or firmware images.
- Analyzing malware or exploits during security research.
- Scripting binary inspection and comparison tasks in automated pipelines.
- Examining embedded or retro-platform executables across unusual architectures.
Quick start
- 1
Clone the repository from GitHub
git clone https://github.com/rizinorg/rizin - 2
Configure the build with meson
meson setup build - 3
Compile Rizin
meson compile -C build - 4
Install Rizin system-wide
sudo meson install -C build
Things to know
- The README documents building from source with meson (version 0.55.0 or newer), so installation takes more setup than a package-manager install.
- The project is licensed under LGPL-3.0, a copyleft license whose terms apply when you distribute modified library code.
In collections
Topics
FAQ
- What is rizin?
- A UNIX-like reverse engineering framework and command-line toolset for analyzing binaries, disassembling code and debugging programs. Rizin is a reverse engineering framework forked from radare2, with an emphasis on usability, features and code cleanliness. It can analyze binaries, disassemble code, debug programs, serve as a forensic tool, and act as a scriptable command-line hexadecimal editor that can open disk files.
- Is rizin free to use? What license does it have?
- rizin is open source under the LGPL-3.0 license. Check the license terms before using it in commercial products.
- Is rizin still maintained?
- Actively maintained. The last commit to rizin was on Nov 5, 2026.
- What can I use rizin for?
- Reverse engineering unknown binaries or firmware images. Analyzing malware or exploits during security research. Scripting binary inspection and comparison tasks in automated pipelines. Examining embedded or retro-platform executables across unusual architectures.
- How do I install rizin?
- Clone the repository from GitHub: git clone https://github.com/rizinorg/rizin Configure the build with meson: meson setup build Compile Rizin: meson compile -C build Install Rizin system-wide: sudo meson install -C build
- Where can I get rizin?
- The source code and installation instructions are on GitHub: https://github.com/rizinorg/rizin
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Ghidra is an open-source software reverse engineering framework from the NSA, offering disassembly, decompilation, graphing and scripting for compiled code.
A free, open-source reverse engineering platform with a GUI, built on the rizin framework.
A cross-platform hex editor for reverse engineering and binary analysis, with a pattern language for parsing file structures.
A Windows-focused PE viewer and analyzer for EXE, DLL, SYS, static libraries, COFF objects and ELF files, with disassembly and decompilation.
Command-line tool that recursively extracts files from 78+ archive, compression and file-system formats and carves out unknown chunks in binary blobs.