rz-find - Man Page

Find byte patterns in files


rz-find[-hijmnrqvxzZ] [-a align] [-b size] [-f/t from/to] [-[e|s|w|S|I] str] [-x hex] [-|file|dir ..]


This command is part of the Rizin project.

rz-find Searches for specified byte patterns, strings, or hexpairs in the given files.

The options are:

-a align

Only accept aligned hits

-b size

Set block size

-e regex

Search for regex matches (can be used multiple times)

-f from

Start searching from address 'from'

-F file

Read the contents of the file and use it as a keyword


Show usage help message


Identify filetype (rizin -nqcpm file)


Output in JSON


Magic search, file-type carver

-M str

Set a binary mask to be applied on keywords


Do not stop the search when a read error occurs


Print using rizin commands

-s str

Search for a specific string (can be used multiple times)

-w str

Search for a specific wide string (can be used multiple times). Assumes str is UTF-8

-I str

Search for an entry in import table

-S str

Search for a symbol in symbol table

-t to

Stop search at address 'to'


Quiet mode - do not show headings (filenames) above matching contents (default for searching a single file)


Show version information

-x hex

Search for an hexpair string (can be used multiple times)


Show hexdump of search results


Search for zero-terminated strings


Show string found on each search hit

See Also

rizin(1), rz-hash(1), rz-bin(1), rz-diff(1), rz-asm(1), rz-gg(1), rz-run(1), rz-ax(1)


pancake <pancake@nopcode.org>


Referenced By

rizin(1), rz-asm(1), rz-ax(1), rz-bin(1), rz-diff(1), rz-gg(1), rz-hash(1), rz-run(1), rz-sign(1).

January 24, 2024