RASIGN2(1)

💖 RASIGN2 💖

okay bestie, gather round, because today we're talking about rasign2 — that's the radare2 signature management tool, from the radare2 manual page family. it's giving "I make zignatures and I make them correctly." let's get into it 🦋

---

✨ SYNOPSIS ✨

rasign2 [-afjhqrvSm] [-A [AAA]] [-i script.r2] [-o sigs.sdb]
        [-s signspace] [-c] [file]

---

🌸 DESCRIPTION 🌸

so what does this icon actually do? rasign2 generates, dumps, and manages zignature scripts — for function identification and cataloging. and what's a zignature, you ask? zignatures are Radare2 scripts that capture metadata associated with function signatures. that's the whole vibe. 💅

it also:

• supports interpretation of FLIRT .sig files
• can execute zignature scripts
• can export signatures in various formats

lowkey a whole toolkit. no cap. ✨

---

🎀 OPTIONS 🎀

one bullet per flag, no skipping, we respect the flag economy in this house:

• -a — make signatures from all .o files in the .a file you hand over
• -A [AAA] — same as r2 -A, and yes bestie, the more As you stack the more analysis gets performed 🔥
• -f — interpret the file as a FLIRT .sig file and dump signatures
• -h — show the help menu (our beloved)
• -j — show signatures in json
• -i script.r2 — execute this script inside the r2 instance
• -o sigs.sdb — add signatures to file, and create it if it does not exist 👑
• -q — quiet mode (shhh 🤫)
• -r — show output in radare commands
• -S — perform the operation on an sdb signature file (and psst: -o - saves to the same file)
• -s signspace — save all signatures under this signspace
• -c — add collision signatures before writing the file
• -v — show version information
• -m — merge/overwrite signatures with the same name

---

🌈 ENVIRONMENT 🌈

okay so here's the tea: rasign2 does not use any environment variables. that's it, that's the section. a clean girl. she needs nothing from your shell. 💅✨

---

🫶 EXAMPLES 🫶

these are the moments, fr fr. copy them exactly, they're doing bits:

generate signatures from a library file:

$ rasign2 -o libc.sdb libc.so.6

perform deep analysis before generating signatures:

$ rasign2 -AA -o enhanced_libc.sdb libc.so.6

output signatures in JSON format:

$ rasign2 -j input_file

show signatures as radare2 commands:

$ rasign2 -r input_file

merge new signatures into an existing file:

$ rasign2 -m -o existing.sdb new_binary

extract signatures from a FLIRT .sig file:

$ rasign2 -f flirt_signatures.sig

ate. no crumbs. 🍓

---

👑 THE Z COMMAND IN RADARE2 👑

not me bringing up the z command but it's literally the main character here. the z command in radare2 is dedicated to the management of binary signatures, known as zignatures. here are the key subcommands, bestie, memorize them iykyk:

• z — show zignatures
• z. — find matching zignatures in current offset
• zb — search for best match
• zd — diff current function and signature
• z* — show zignatures in radare format
• zo — manage zignature files
• zf — manage FLIRT signatures
• z/ — search zignatures
• zc — compare current zignspace zignatures
• zs — manage zignspaces
• zi — show zignatures matching information

these commands facilitate a robust workflow for binary analysis, enabling the identification of known functions and comparing binary similarities. ✨ (yes that sentence is doing the heavy lifting and yes it's correct.)

---

🧚 SUPPORTED ZIGNATURE METRICS 🧚

zignatures in radare2 can be created with various metrics — here's the whole alphabet of vibes:

• a — bytes pattern (masked)
• b — raw bytes pattern
• c — base64 comment
• n — real function name
• g — graph metrics (complexity, edges, basic blocks)
• o — original offset
• r — references
• x — cross references
• h — basic block hashes
• v — variables and arguments

---

💜 SEE ALSO 💜

• radare2(1) — go read that one too, bestie, it's the parent lore

---

🌸 AUTHORS 🌸

• pancake <pancake@nopcode.org> 💖

---

bestie reminder: this page is from the radare2 manual, dated Jul 10, 2025, and the page you just read is RASIGN2(1). slay, go make some signatures, and remember — every flag, every metric, every example, all preserved, periodt. 💅✨🎀