http://youterm.com/?video=radare/zoom http://youterm.com/?video=radare/remote http://youterm.com/?video=radare/dump
btw I have added two new interesting commands: > c? [0x00000000]> c? Usage: w[?|w|x|f] [argument] c [string] - compares a plain with escaped chars string cd [offset] - compare a doubleword from a math expression cx [hexpair] - compare hexpair string cf [file] - compare contents of file at current seek For example: ; compares first 4 bytes in esp with value 1 in lil endian > cd 1 @ esp > cx 7f 45 @ 0x8048000 ; dump current block > pr > dump ; compare file contents with cur block > cf dump The other command is '!ie' which allows you to ignore debugger events: > !ie 0 stop 0 trap 0 pipe 0 alarm 0 fpe 0 ill ; if the program performs any manual int3 we can ignore them ; with this command: > !ie trap ; we can also ignore the sigalarms > !ie alarm ; or unignore them again: > !ie -alarm > !ie -trap have fun! --pancake _______________________________________________ radare mailing list [email protected] https://lists.nopcode.org/mailman/listinfo/radare
