.Dd Jan 24, 2024
.Dt RZ_FIND 1
.Sh NAME
.Nm rz-find
.Nd Find byte patterns in files
.Sh SYNOPSIS
.Nm rz-find
.Op Fl hijmnrqvxzZ
.Op Fl a Ar align
.Op Fl b Ar size
.Op Fl f/t Ar from/to
.Op Fl  Ar [e|s|w|S|I] str
.Op Fl x Ar hex
.Op Fl  Ar |file|dir ..
.Sh DESCRIPTION
This command is part of the Rizin project.
.Pp
.Nm rz-find
Searches for specified byte patterns, strings, or hexpairs in the given files.
.Pp
The options are:
.Bl -tag -width Fl
.It Fl a Ar align
Only accept aligned hits
.It Fl b Ar size
Set block size
.It Fl e Ar regex
Search for regex matches (can be used multiple times)
.It Fl f Ar from
Start searching from address 'from'
.It Fl F Ar file
Read the contents of the file and use it as a keyword
.It Fl h
Show usage help message
.It Fl i
Identify filetype (rizin -nqcpm file)
.It Fl j
Output in JSON
.It Fl m
Magic search, file-type carver
.It Fl M Ar str
Set a binary mask to be applied on keywords
.It Fl n
Do not stop the search when a read error occurs
.It Fl r
Print using rizin commands
.It Fl s Ar str
Search for a specific string (can be used multiple times)
.It Fl w Ar str
Search for a specific wide string (can be used multiple times). Assumes str is UTF-8
.It Fl I Ar str
Search for an entry in import table
.It Fl S Ar str
Search for a symbol in symbol table
.It Fl t Ar to
Stop search at address 'to'
.It Fl q
Quiet mode - do not show headings (filenames) above matching contents (default for searching a single file)
.It Fl v
Show version information
.It Fl x Ar hex
Search for an hexpair string (can be used multiple times)
.It Fl X
Show hexdump of search results
.It Fl z
Search for zero-terminated strings
.It Fl Z
Show string found on each search hit
.It Fl E Ar command
Execute <command> for each file found.
.Pp
.Sh SEE ALSO
.Pp
.Xr rizin(1) ,
.Xr rz-hash(1) ,
.Xr rz-bin(1) ,
.Xr rz-diff(1) ,
.Xr rz-asm(1) ,
.Xr rz-gg(1) ,
.Xr rz-run(1) ,
.Xr rz-ax(1)
.Sh AUTHORS
.Pp
pancake <pancake@nopcode.org>
.Pp
byteninjaa0