# Binary Instrument

Domain: `binary-instrument`

Binary instrumentation domain providing binary analysis and runtime instrumentation capabilities.

## Profiles

- full

## Typical scenarios

- Binary analysis
- Runtime instrumentation
- Memory pattern detection

## Common combinations

- binary-instrument + memory
- binary-instrument + process

## Full tool list (23)

| Tool | Description |
| --- | --- |
| `binary_instrument_capabilities` | Report binary instrumentation backend availability. |
| `frida_attach` | Attach Frida to a local target and open a session. |
| `frida_enumerate_modules` | List loaded modules in an attached Frida session. |
| `ghidra_analyze` | Analyze a binary and return metadata. |
| `generate_hooks` | Generate a Frida interceptor script for a list of symbols. |
| `unidbg_emulate` | Emulate a native function with Unidbg when available. |
| `frida_run_script` | Execute a Frida JavaScript snippet inside an attached Frida session. |
| `frida_detach` | Detach from a Frida session and clean up resources. |
| `frida_list_sessions` | List all active Frida attach sessions with target info. |
| `frida_generate_script` | Generate a Frida interceptor or hook script from built-in templates. |
| `get_available_plugins` | List installed binary analysis plugins. |
| `ghidra_decompile` | Decompile a function using Ghidra. |
| `ida_decompile` | Decompile a function using IDA Pro. |
| `jadx_decompile` | Decompile an APK class or method with JADX CLI, auto-resolving likely class matches when possible, or use the legacy plugin bridge when available. |
| `apktool_decode` | Decode an APK using apktool to inspect resources, manifest, and smali output. |
| `apk_manifest_dump` | Extract AndroidManifest.xml from an APK for quick inspection; return readable XML when possible, using JADX CLI as a cross-platform decode fallback for binary AXML, otherwise return base64. |
| `apk_native_libs_list` | List packaged native shared libraries (.so) inside an APK. |
| `unidbg_launch` | Emulate a native shared library in Unidbg. |
| `unidbg_call` | Call a JNI function in a running Unidbg emulator session. |
| `unidbg_trace` | Get execution trace from Unidbg session with configurable detail. |
| `export_hook_script` | Export generated hook templates as a complete, runnable Frida script. |
| `frida_enumerate_functions` | Enumerate exported functions for a specific module in a Frida session. |
| `frida_find_symbols` | Search for symbols matching a pattern in a Frida session. |
