NAME

     rafind2 — advanced command-line byte pattern search in files

SYNOPSIS

     rafind2 [-a align] [-b size] [-c] [-e regex] [-f from] [-F file] [-h] [-i] [-j] [-L] [-m]
             [-M mask] [-n] [-q] [-r] [-s str] [-S str] [-t to] [-v] [-V s:num | s:num1,num2]
             [-x hex] [-X] [-z] [-Z] file|dir ..

DESCRIPTION

     rafind2 is a versatile program designed to find byte patterns in files.

     The following options are available:

     -a align    Only accept aligned search results.

     -b size     Define the block size for searching. Depending on the cpu cache, memory and
                 storage different sizes may affect the performance.

     -c          Disable colorful output, primarily useful for non-interactive or batch use-
                 cases.

     -e regex    Search for matches using regular expressions. Multiple expressions can be
                 provided.

     -f from     Specify the starting address for the search. (See -t)

     -F file     Read keywords from the specified file for searching.

     -h          Display the help message.

     -i          Identify the filetype using similar techniques as the 'file' command.

     -j          Output results in JSON format.

     -L          List all available I/O plugins.

     -m          Perform magic search to identify file types based on signatures.

     -M mask     Apply a binary mask to the keywords before searching.

     -n          Continue searching even if read errors occur.

     -q          Quiet mode: suppress headings or filenames in the output.

     -r          Print results using radare commands.

     -s str      Search for the specified string(s) in the file(s).

     -S str      Search for wide strings (Unicode) in the file(s).

     -t to       Specify the ending address for the search. (See -f)

     -v          Display the version of rafind2 and exit.

     -V s:num | s:num1,num2
                 Search for the given value using little-endian notation. A single value can be
                 specified (e.g., -V 4:123) or a range of values can be searched by providing two
                 values separated by a comma (e.g., -V 4:100,200).

     -x hex      Search for the specified hex pattern(s) in the file(s).

     -X          Display the hexdump of search results.

     -z          Search for zero-terminated strings.

     -Z          Display strings found on each search hit.

EXAMPLES

     Search for a specific string in a file:

           $ rafind2 -s "search_string" file.txt

     Search for a hex pattern in all the files from directory:

           $ rafind2 -x "909090" directory_path

     Identify the file type using the magic database:

           $ rafind2 -i binary_file

     Search for the little endian 123 stored in a 4 byte word inside a file:

           $ rafind2 -V 4:123 file.bin

SEE ALSO

     radare2(1)

WWW

     https://www.radare.org/

AUTHORS

     pancake <pancake@nopcode.org>

                                           Mar 16, 2024