RzWeb is a browser-based reverse engineering interface powered by Rizin compiled to WebAssembly. Drop a binary into the app and analyze it locally in your browser with a persistent session, terminal access, cached re-open support, and dedicated views for disassembly, decompilation, cross-references, control-flow graphs, and the rest of the main analysis surfaces. Rizin runs in a Web Worker, so heavy analysis never blocks the UI.
Homepage
Terminal
Disassembly
Decompiler
Cross-references
Control Flow Graph
Hex Dump
Strings
Imports
Exports
Sections
Binary Info
- Persistent Rizin sessions through the paired
rzwasibuild, so analysis state, seeks, and follow-up commands stay live inside the same binary session. - Rizin runs in a Web Worker, keeping the UI responsive during analysis, multi-MB JSON parsing, and persistence.
- Full terminal access with live command autocomplete,
Tabcompletion, arrow-key selection, in-terminal find, and configurable minimum characters and max results returned. - Dedicated views for disassembly, decompilation, cross-references, control-flow graphs, hex, strings, imports, exports, sections, and binary information.
- Built-in decompiler view (auto-detects the build's decompiler command, e.g.
pdg/pdc) with C-style syntax highlighting and one-click copy. - Cross-references panel showing who references the current address and where it points, with click-to-seek.
- Interactive control-flow graph: click a basic block to seek, current-block highlighting, and an automatic dagre layout.
- Command palette (
Ctrl/Cmd+K) for fuzzy function and string search,0xaddress seeking, and running any Rizin command. - Keyboard shortcuts for view switching (
Alt+1..9), the palette, the sidebar, settings, and shortcut help. - Save and reopen analysis sessions as self-contained
.rzdbproject files that embed the binary, so a saved project reopens cold in a single click without needing the original file; raw Rizin.rzdbfiles are also accepted when the matching binary is already open. - Analysis caching keyed by binary hash, including direct reopen from the homepage when binary data is stored in the cache.
- Configurable command output limits and warning banners for oversized binaries or truncated metadata.
- Responsive layout tuned for both desktop and mobile usage.
RzWeb follows the formats supported by the bundled Rizin build, including:
- ELF
- PE / PE+
- Mach-O
- Raw firmware and byte dumps
- Open the app.
- Drop or pick a binary.
- Analyze it with the configured depth.
- Move between the terminal and structured views, or reopen the same cached binary later from the homepage.
Everything runs locally in the browser. Files stay on the device and are loaded into WebAssembly memory and browser storage only.
RzWeb does not upload binaries to a server. Analysis, caching, and reopening happen entirely in the browser via WebAssembly, IndexedDB, and the in-memory filesystem exposed by Emscripten.
- Debugging features that require
ptraceare unavailable in browser sandboxes. - Analysis is still single-threaded WebAssembly work, so very large binaries can take time.
- Available functionality ultimately depends on the capabilities exported by the current
rzwasibuild.
git clone https://github.com/IndAlok/rzweb
cd rzweb
npm install
npm run devThe frontend uses React, TypeScript, Tailwind CSS, Zustand, xterm.js, and Cytoscape for graph rendering. The Rizin WebAssembly module runs inside a Web Worker that owns all native calls, filesystem access, JSON parsing, and IndexedDB persistence, the main thread talks to it through a typed RPC facade, so the UI never blocks on analysis. The reverse engineering core comes from the companion rzwasi repository, which builds Rizin to WebAssembly and exposes both the traditional CLI entrypoint and the persistent rzweb_* session API used by RzWeb.
Questions, ideas, or need a hand? Join the chat:
Built by IndAlok
Powered by Rizin, the open-source Reverse Engineering framework.