# Binder Trace

> Frida-based terminal tool, described by its authors as "Wireshark for Binder", that intercepts the Binder IPC transactions an Android process sends and parses each message and its reply. Bundled structure files for specific Android releases map transaction codes back to AIDL interface and method names and decode parcel arguments into typed fields beside a hex dump. A frequency pane and a JSON filter file narrow the stream by interface, method or type, showing which system services an app calls and with what data.

- Type: Tool
- Targets: App · Protocol
- Category: Android tools
- Relationship: Foundation tool
- Sources reviewed: 2026-10-20
- Added to the catalog: 2026-11-02
- Original resource: <https://github.com/foundryzero/binder-trace>
- Primary source: <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/README.md>
- Catalog page: <https://awesomerea.org/resources/binder-trace/>
- Record JSON: <https://awesomerea.org/resources/binder-trace/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/binder-trace/index.md)

## Requirements & limits

- PyPI release at review: binder-trace 1.4.1, published 2024-08-01, requiring Python 3.9+. The reviewed main commit of 2025-09-11 is one README-only commit later, correcting the frida-server steps and the listed Android versions, and is the latest activity.
- Needs a rooted Android device or emulator, adb running as root and a frida-server matching the installed Frida Python package, which requirements.txt leaves unpinned. It attaches to a process by PID or name, or spawns it, and should be used on devices and apps the analyst may analyse. Clipboard copy on Linux needs xclip or xsel.
- Default structure sets cover Android 9 to 14, with extra sets for 8.1 and some point releases. STRUCTURES.md explains that AIDL method numbering and parcel layouts change between builds, so results on a device whose build differs from the bundled AOSP tags can be wrong and the files may need hand-editing. Only transactions the attached process issues through libbinder's IPCThreadState::transact are captured, together with their replies.
- CI runs tox with isort, black, flake8, pydocstyle and pytest across several Python versions; the tests cover argument parsing, parcel parsing and the terminal interface, not live devices. MIT licensed.

## Primary sources

1. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/README.md>
2. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/STRUCTURES.md>
3. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/binder_trace/binder_trace/__main__.py>
4. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/binder_trace/binder_trace/js/interceptbinder.js>
5. <https://github.com/foundryzero/binder-trace/tree/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/binder_trace/binder_trace/structs>
6. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/binder_trace/requirements.txt>
7. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/binder_trace/setup.py>
8. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/tox.ini>
9. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/.github/workflows/style.yml>
10. <https://github.com/foundryzero/binder-trace/blob/a8a9a06fbf85dbf2241f9232c3776a515b05f8eb/LICENSE>
11. <https://pypi.org/project/binder-trace/1.4.1/>

## More in Apps

- [Quark-Engine](https://awesomerea.org/resources/quark-engine/index.md) · Tool
- [Dexcalibur (Reversense)](https://awesomerea.org/resources/dexcalibur/index.md) · Tool
- [vdexExtractor](https://awesomerea.org/resources/vdexextractor/index.md) · Tool
- [Garlic](https://awesomerea.org/resources/garlic-decompiler/index.md) · Tool
- [Android-Disassembler](https://awesomerea.org/resources/android-disassembler/index.md) · Tool
- [XAPKDetector](https://awesomerea.org/resources/xapkdetector/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.