rizinorg

rizin

C2020–2026

rizinorg / rizin

rizin

UNIX-like reverse engineering framework and command-line toolset.

Explore on GitHub Read Hacker News discussions

5Distinct people

32Mentions

0Explicit recommenders

4.2KGitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

UNIX-like reverse engineering framework and command-line toolset.

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

rizinorg/cutter · linked in 6 of the same discussions
rizinorg/sigdb · linked in 2 of the same discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year32 dated mentions

Observed mentions: 2020-12-13 07:30:10 UTC to 2026-08-25 17:30:49 UTC.

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Submissions	Comments
2020	2020-01-01 00:00:00 UTC	2021-01-01 00:00:00 UTC	1	0	1
2021	2021-01-01 00:00:00 UTC	2022-01-01 00:00:00 UTC	5	0	5
2022	2022-01-01 00:00:00 UTC	2023-01-01 00:00:00 UTC	5	1	4
2023	2023-01-01 00:00:00 UTC	2024-01-01 00:00:00 UTC	8	0	8
2024	2024-01-01 00:00:00 UTC	2025-01-01 00:00:00 UTC	6	0	6
2025	2025-01-01 00:00:00 UTC	2026-01-01 00:00:00 UTC	2	0	2
2026 (partial)	2026-01-01 00:00:00 UTC	2027-01-01 00:00:00 UTC	5	0	5

What Hacker News says

32 sources

xvilka·Aug 25, 2026

Rizin[1][2] has the byte-level highlight (enter visual mode with `V` key then rotate through modes using `p` or `P`)[3], and there is an issue[4] for Cutter to add binary visualization as a plugin, if anyone is up to the task. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://book.rizin.re/src/visual_mode/intro.html [4] https://github.com/rizinorg/cutter-plugins/issues/3

In Visualizing Binary Files

xvilka·Apr 23, 2026

Rizin[1][2] does exactly this, also there is a compact hex-II[3] mode. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://speakerdeck.com/ange/no-more-dumb-hex

In Your hex editor should color-code bytes

xvilka·Feb 16, 2026

Yes, we are working on rewriting analysis completely[1][2] that would fix your issue along with many others. [1] https://github.com/rizinorg/rizin/pull/5505 [2] https://github.com/rizinorg/rizin/issues/4736

In Ghidra by NSA

aktau·Feb 16, 2026

+1 I once tried learning how to RE with radare2 but got very frustrated by frequent project file corruption (meaning radare2 could no longer open it). The way these project files work(ed?) in radare2 at the time was that it just saved all the commands you executed, instead of the state. This was brittle, in my experience. I don't have a lot of free time, so I have to leave projects for long periods of time, not being able to restart from a previous checkpoints meant I never actually got further. IIUC, one of the first things Rizin did was focus on saving the actual state, and backwards/forwards-compatibility. This fact alone made me switch to Rizin. To its credit, my 3-year old project file still works! Now for the downside: there is apparently a gap in Windows (32-bit) PE support, causing stack variables to be poorly discovered: https://

Read the rest

github.com/rizinorg/rizin/issues/4608. I tested this on radare2, which does not have this bug. I'm hoping this gets fixed in Rizin at some point, at which point I'll continue my RE adventure. Or maybe I should give an AI reverse engineer a try... (https://news.ycombinator.com/item?id=46846101).

In Ghidra by NSA

xvilka·Feb 16, 2026

Cutter[1] by RizinOrg[2]. [1] https://github.com/rizinorg/cutter [2] https://github.com/rizinorg/rizin

In Ghidra by NSA

xvilka·Dec 8, 2025

We use the tree-sitter[1] for parsing C declarations in Rizin[2] (see the "td" command, for example). See our custom grammar[3] (modified mainstream tree-sitter-c). The custom grammar was sadly necessary, due to the inability of Tree-Sitter to have the alternate roots[4]. P.S. Please add a license for your code. [1] https://tree-sitter.github.io/ [2] https://github.com/rizinorg/rizin/tree/dev/librz/type/parser [3] https://github.com/rizinorg/rizin-grammar-c/ [4] https://github.com/tree-sitter/tree-sitter/issues/711

In Show HN: Cdecl-dump - represent C declarations visually

xvilka·Jul 2, 2025

Rizin[1] (from `dev` git) has good support of Hexagon ISA and MDT images as well as RzIL uplifting, see the implementation [2]. Would definitely help for the static analysis in addition to these tools. [1] https://github.com/rizinorg/rizin [2] https://github.com/rizinorg/rizin/tree/dev/librz/arch/isa/he...

In Hexagon fuzz: Full-system emulated fuzzing of Qualcomm basebands

xvilka·Nov 8, 2024

We (Rizin) would love to improve QNX support of our FOSS reverse engineering and debugging framework. We already support[1][2][3][4] it, but can't reliably test. Would be awesome to have the QEMU image out of the box, just like Windows provides ready to use limited VMs for testing[5]. [1] https://github.com/rizinorg/rizin/tree/dev/librz/bin/format/... [2] https://github.com/rizinorg/rizin/blob/dev/librz/bin/p/bin_q... [3] https://github.com/rizinorg/rizin/blob/dev/librz/debug/p/deb... [4] https://github.com/rizinorg/rizin/tree/dev/subprojects/rzqnx [5] https://developer.microsoft.com/en-us/windows/downloads/virt...

In QNX is now free for anything non-commercial, plus there's an RPi image

xvilka·Apr 2, 2024

Just for the record, for nicer inspection of files with such debug information, including compressed sections, and debuginfod support, Rizin[1] can be used, since starting from the 0.7.0 release[2] all of those were added. [1] https://rizin.re [2] https://github.com/rizinorg/rizin/releases/tag/v0.7.0

In Refix: Fast, Debuggable, Reproducible Builds

xvilka·Mar 18, 2024

What do you mean? The Rizin code does all the hard part (we add uplifting code for every architecture manually; you can see a list of supported architectures using `rz-asm -L` and check for the `I` letter, which means "IL." You need to call the necessary APIs. See, for example, how it's done in one of the integration tests[1]. As for the use of Rizin from Python, we have a rz-bindgen[2][3]. [1] https://github.com/rizinorg/rizin/blob/dev/test/integration/... [2] https://rizin.re/posts/gsoc-2022-rz-bindgen/ [3] https://github.com/rizinorg/rz-bindgen

In LLM4Decompile: Decompiling Binary Code with LLM

xvilka·Mar 18, 2024

I think using higher-level input, e.g. the intermediate language like RzIL[1] could produce better results and is more scalable for making such decompliation multiplatform. As RzIL text form resemples SMT, it should make LLM easier to "understand" the meaning. Moreover, information from binary such as symbols, signatures, debug information (DWARF, PDB, etc) could enrich the result further. You can download Rizin[2] and try for yourself by calling `aaa` then `plf` for any chosen functions for architectures supported by RzIL. See the example excerpt for a function with this disassembly: │ │ 0x140007e51 movsd qword [rdi + 0x50], xmm2 │ │ 0x140007e56 mov qword [rdi + 0x48], 0 │ │ 0x140007e5e call sym.rz_test.exe_ht_pp_free ; sym.rz_test.exe_ht_pp_free │ │ 0x140007e63 mova

Read the rest

ps xmm7, xmmword [var_38h] │ │ 0x140007e68 movaps xmm6, xmmword [var_28h] │ │ 0x140007e6d mov rbp, qword [var_10h] │ └─> 0x140007e72 add rsp, 0x48 │ 0x140007e76 pop r15 │ 0x140007e78 pop rdi └ 0x140007e79 ret 0x140007e6d (set rbp (loadw 0 64 (+ (var rsp) (bv 64 0x68)))) 0x140007e72 (seq (set op1 (var rsp)) (set op2 (bv 64 0x48)) (set sum (+ (var op1) (var op2))) (set rsp (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (! (is_zero (var _val))) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) 0x140007e76 (seq (set r15 (cast 64 false (loadw 0 64 (+ (var rsp) (bv 64 0x0))))) (set rsp (+ (var rsp) (bv 64 0x8)))) 0x140007e78 (seq (set rdi (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set rsp (+ (var rsp) (bv 64 0x8)))) 0x140007e79 (seq (set tgt (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set rsp (+ (var rsp) (bv 64 0x8))) (jmp (var tgt))) [1] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md [2] https://rizin.re

In LLM4Decompile: Decompiling Binary Code with LLM

xvilka·Jan 13, 2024

Rizin[1] is also able to uplift native code to the new RzIL, which is based on the BAP Core Theory[2] and is essentially an extension of SMT theories of bitvectors, bitvector-indexed arrays of bitvectors and effects[3]. [1] https://rizin.re/ [2] https://binaryanalysisplatform.github.io/bap/api/master/bap-... [3] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md

In revng translates (i386, x86-64, MIPS, ARM, AArch64, s390x) binaries to LLVM IR

xvilka·Jan 2, 2024

Everything Hiew can do, Rizin[1] can do too, and is completely free and open source[2] under LGPL3 license. Moreover, it supports more architectures, platforms, and file formats, as well as GUI in Qt - Cutter[3][4]. If something is missing in Rizin but presented in Hiew, please let us know by opening the issue with details. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://cutter.re [4] https://github.com/rizinorg/cutter

In Hiew Hex Editor

xvilka·Nov 12, 2023

This is precisely what we are trying to do at Rizin[1][2]. Though the primary goal of the tool/framework is static analysis. All that portability across OSes, their versions, platforms and architectures, etc is definitely hard. If anyone is interested in these subjects, all contributions are welcome. For example, check out our "RzDebug" label, marking debugging issues[3]. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://github.com/rizinorg/rizin/labels/RzDebug

In Show HN: I spent 6 months building a C debugger as a 17-year-old

xvilka·Aug 6, 2023

See our FAQ[1] on why we forked. As three years passed and both projects are actively developed, the divergence has grown a lot since. We aim for exposing the proper API instead of relying just commands, see e.g. our new Python bindings and rz-bindgen[2]. We have completely different concept of projects, new intermediate language - RzIL[3], and many other things. And under the new organization Cutter is a first-class citizen, not an afterthought as before. [1] https://rizin.re/posts/faq/ [2] https://rizin.re/posts/gsoc-2022-rz-bindgen/ [3] https://github.com/rizinorg/rizin/blob/dev/doc/rzil.md

In Veles – A tool for binary analysis (2018)

Showing the 15 most recent of 32 sources. Enable JavaScript to search and browse every indexed mention.