radare2 plugins — r2pm ecosystem overview

Last updated: · By the BinBench editorial team · Stars and releases checked via the GitHub API
For legal, authorized and educational use only. Only analyze software you own or have written permission to examine.
Quick answer

radare2 (radareorg/radare2) is a libre reverse-engineering framework. Its plugin libraries (asm, anal, bin, debug, io, lang, …) are extended through r2pm packages and in-tree plugin slots. Install only packages you trust on binaries you are authorized to examine.

On this page

Snapshot

FieldValue
Hostradare2 (LGPLv3 core; plugins may differ — check r2 -Lj)
Package managerr2pm (-U update DB, -s search, -i install, -l list)
Famous examplesr2ghidra, r2dec, r2frida, r2yara (verify each license)
PeersCutter plugins, rizin vs radare2, r2ghidra

Allowed framing

  • Teaching a course lab to install r2ghidra or r2dec from official r2pm on sample binaries students compiled.
  • Listing loaded asm/bin plugins with -L so beginners see architecture coverage without inventing loaders.
  • Comparing r2pm with Rizin's rz-pm when a syllabus covers both frameworks — see radare2 vs rizin vs Cutter.

Scope we will not cover

  • No crack/keygen / license-bypass “plugins.”
  • No exploit / ROP / shellcode cookbooks via r2egg framing.
  • No claiming every radare2-pm database entry is still maintained — check commit dates yourself.
  • No anti-debug or DRM defeat recipes.

Beginner path (authorized only)

  1. Install radare2 from an official channel your lab approves; confirm r2 -v.
  2. Run r2pm -U to initialize/update the package database (requires network the first time).
  3. r2pm -s ghidra (or another keyword); read the package doc with r2pm -d <pkg> before installing.
  4. r2pm -i <pkg> for a user install; reopen r2 and confirm the new commands/plugins load.
  5. Prefer one decompiler plugin at a time in early labs; escalate packed malware only inside isolated VMs under authorization.
Which to pick
  • Use r2pm to extend authorized radare2 labs with maintained community plugins.
  • Prefer Rizin + rz-pm / Cutter plugins when your stack standardized on the Rizin fork.
  • Refuse crack and exploit plugin framing.

For legal, authorized and educational use only.

FAQ

What is r2pm?

r2pm is radare2's package manager for discovering, installing, updating and removing plugins and related tools. Official book workflow starts with updating the package database (r2pm -U), then search (r2pm -s) and install (r2pm -i).

Where do user plugins land?

User installs typically go under the r2pm plugin directory (commonly under ~/.local/share/radare2/plugins / config paths documented via r2pm -H). Prefer user installs in labs before system-wide -gi.

Famous plugins people install?

The radare2 book and README commonly mention packages such as r2ghidra, r2dec, r2frida and r2yara — each has its own license and maintenance status. See also r2ghidra overview.

How do I list plugins already loaded in r2?

Many r2 tools accept -L (for example rasm2 -L, rabin2 -L). Inside an r2 session, L-suffixed commands and e asm.arch=? style evals list plugin families — confirm with ? help on your installed version.

Does this teach crack plugins or exploit PoCs?

No. Authorized extension and education only — BinBench will not supply crack/keygen plugins, DRM bypasses or exploit cookbooks.

Sources