Rizin

What it is

A UNIX-like command-line toolset and C library for taking apart executables. It handles many file formats and CPU architectures and offers disassembly, analysis, debugging, patching, and scripting.

What it helps with

- Disassembling and analyzing malware samples
- Debugging and patching binaries
- Scripting repetitive analysis tasks
- Inspecting firmware and unusual architectures

Who it's for

Malware analysts, reverse engineers, CTF players, and vulnerability researchers.

Worth knowing

It started as a fork of radare2 in 2020 with a focus on usability and a stable API. Decompiler support comes from plugins such as rz-ghidra.

Is there a graphical interface?
Yes, Cutter is the official GUI and is built on top of Rizin.

Should I choose it over radare2?
In our view Rizin suits users who want cleaner commands and a steadier API, while radare2 has the longer history and its own community.