The conversation

Lessons learnedExperience excerpt · English

I once tried learning how to RE with radare2 but got very frustrated by frequent project file …

… I once tried learning how to RE with radare2 but got very frustrated by frequent project file corruption (meaning radare2 could no longer open it). The way these project files work(ed?) in radare2 at the time was that it just saved all the commands you executed, instead of the state. This was brittle, in my experience. I don't have a lot of free time, so I have to leave projects for long periods of time, not being able to restart from a previous checkpoints meant I never actually got further. IIUC, one of the first things Rizin did was focus on saving the actual state, and backwards/forwards-compatibility. This fact alone made me switch to Rizin. To its credit, my 3-year old project file still works! Now for the downside: there is apparently a gap in Windows (32-bit) PE support, causing stack variables to be poorly discovered: https://github.com/rizinorg/rizin/issues/4608 . I tested this on radare2, which does not have this bug. I'm hoping this gets fixed in Rizin at some point, at which point I'll continue my RE adventure. Or maybe I should give an AI reverse engineer a try... …

Original discussionGhidra by NSA220 source comments · at import
2

What was this responding to?

Parent context · original excerpt

XV

Cutter[1] by RizinOrg[2]. [1] https://github.com/rizinorg/cutter [2] https://github.com/rizinorg/rizin

Full original

Community replies 0

No community replies yet. Add your perspective.

Replies from the source 2

Direct replies available in this import. Original-language excerpts.

XV

Yes, we are working on rewriting analysis completely[1][2] that would fix your issue along with many others. [1] https://github.com/rizinorg/rizin/pull/5505 [2] https://github.com/rizinorg/rizin/issues/4736

Full original
AL

I tried radare2 with the official GUI Iaito. Iaito saves the project in a git repo, so whenever I got corruption (and I got it a lot, like every 4-5 saves) I was just a `git reset --hard` away from restoring a good state. Not the most efficient way of operation, but for me it was better this than tolerating Ghidra's tiny Courier New font.

Full original
Continue on Hacker News

Respect different perspectives. Share concrete experiences.

Sign in to post, reply, repost, and quote.