---
name: "rz-find"
section: "1"
platform: "linux"
package: "rizin"
version: "0.8.2-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/rz-find"
---

# rz-find(1)

Find byte patterns in files

## NAME

**rz-find** – Find byte patterns in files

## SYNOPSIS

**rz-find** \[**-hijmnrqvxzZ**\] \[**-a** *align*\] \[**-b** *size*\] \[**-f/t** *from/to*\] \[**-***\[e\|s\|w\|S\|I\]* *str*\] \[**-x** *hex*\] \[**-***\|file\|dir* *..*\]

## DESCRIPTION

This command is part of the Rizin project.

**rz-find** Searches for specified byte patterns, strings, or hexpairs in the given files.

The options are:

- **-a** *align*

  Only accept aligned hits

- **-b** *size*

  Set block size

- **-e** *regex*

  Search for regex matches (can be used multiple times)

- **-f** *from*

  Start searching from address 'from'

- **-F** *file*

  Read the contents of the file and use it as a keyword

- **-h**

  Show usage help message

- **-i**

  Identify filetype (rizin -nqcpm file)

- **-j**

  Output in JSON

- **-m**

  Magic search, file-type carver

- **-M** *str*

  Set a binary mask to be applied on keywords

- **-n**

  Do not stop the search when a read error occurs

- **-r**

  Print using rizin commands

- **-s** *str*

  Search for a specific string (can be used multiple times)

- **-w** *str*

  Search for a specific wide string (can be used multiple times). Assumes str is UTF-8

- **-I** *str*

  Search for an entry in import table

- **-S** *str*

  Search for a symbol in symbol table

- **-t** *to*

  Stop search at address 'to'

- **-q**

  Quiet mode - do not show headings (filenames) above matching contents (default for searching a single file)

- **-v**

  Show version information

- **-x** *hex*

  Search for an hexpair string (can be used multiple times)

- **-X**

  Show hexdump of search results

- **-z**

  Search for zero-terminated strings

- **-Z**

  Show string found on each search hit

- **-E** *command*

  Execute \<command\> for each file found.

## SEE ALSO

[rizin(1)](/rizin/1.md), [rz-hash(1)](/rz-hash/1.md), [rz-bin(1)](/rz-bin/1.md), [rz-diff(1)](/rz-diff/1.md), [rz-asm(1)](/rz-asm/1.md), [rz-gg(1)](/rz-gg/1.md), [rz-run(1)](/rz-run/1.md), [rz-ax(1)](/rz-ax/1.md)

## AUTHORS

pancake \<pancake@nopcode.org\>

byteninjaa0