RzWeb is a browser-based reverse engineering interface powered by Rizin compiled to WebAssembly. Drop a binary into the app and analyze it locally in your browser with a persistent session, terminal access, cached re-open support, and dedicated views for the main analysis surfaces.
Homepage
Terminal
Disassembly
Control Flow Graph
Hex Dump
Strings
Imports
Exports
Sections
Binary Info
- Persistent Rizin sessions through the paired
rzwasibuild, so analysis state, seeks, and follow-up commands stay live inside the same binary session. - Full terminal access with live command autocomplete,
Tabcompletion, arrow-key selection, and configurable minimum characters and max results returned. - Dedicated views for disassembly, control-flow graphs, hex, strings, imports, exports, sections, and binary information.
- Analysis caching keyed by binary hash, including direct reopen from the homepage when binary data is stored in the cache.
- Configurable command output limits and warning banners for oversized binaries or truncated metadata.
- Responsive layout tuned for both desktop and mobile usage.
RzWeb follows the formats supported by the bundled Rizin build, including:
- ELF
- PE / PE+
- Mach-O
- Raw firmware and byte dumps
- Open the app.
- Drop or pick a binary.
- Analyze it with the configured depth.
- Move between the terminal and structured views, or reopen the same cached binary later from the homepage.
Everything runs locally in the browser. Files stay on the device and are loaded into WebAssembly memory and browser storage only.
RzWeb does not upload binaries to a server. Analysis, caching, and reopening happen entirely in the browser via WebAssembly, IndexedDB, and the in-memory filesystem exposed by Emscripten.
- Debugging features that require
ptraceare unavailable in browser sandboxes. - Analysis is still single-threaded WebAssembly work, so very large binaries can take time.
- Available functionality ultimately depends on the capabilities exported by the current
rzwasibuild.
git clone https://github.com/IndAlok/rzweb
cd rzweb
npm install
npm run devThe frontend uses React, TypeScript, Tailwind CSS, Zustand, and xterm.js. The reverse engineering core comes from the companion rzwasi repository, which builds Rizin to WebAssembly and exposes both the traditional CLI entrypoint and the persistent rzweb_* session API used by RzWeb.
Built by IndAlok
Powered by Rizin, the open-source Reverse Engineering framework.