Dr. Binary is a binary-analysis platform built for AI agents. An agent can already invoke tools like Ghidra and angr, but invocation alone is not reliable analysis: representations are fragmented, expensive analysis state is lost between steps, long-running analyses are hard to steer, and conclusions drift from the facts that produced them. Dr. Binary provides the integrated environment instead — persistent program context an agent can browse and search, concrete and symbolic execution it can drive step by step or by script, and automated binary diffing — with findings tied to replayable program facts. Analysis runs in our cloud, from your own agent over MCP, or fully on-premise. Built by Deepbits Technology Inc.

How much does Dr. Binary cost?

Dr. Binary offers three pricing tiers: Free ($0/month, 1,000 credits with a 100/day limit), Pro ($199/month or $1,990/year, 30,000 credits with MCP integrations), and Max ($599/month or $5,990/year, 100,000 credits with private AI model support and on-premise deployment options).

What binary analysis tools does Dr. Binary include?

Dr. Binary includes the standard reverse-engineering stack — Ghidra, angr, YARA, VirusTotal and more — plus two proprietary engines: DeepDi (a GPU-accelerated AI disassembler that is fast and obfuscation-resistant) and DeepDiff (AI-powered binary diffing for vulnerability research and patch analysis). The tools are the floor, not the product: Dr. Binary connects them into one environment with a shared program representation, so analysis results are computed once and reused instead of being rebuilt on every step.

Check for known CVEs in Adobe Reader APK

Name: Dr. Binary
Author: Deepbits Technology Inc.

adobe_reader_21.8.0_arm64-v8a.apk

check are there any know CVEs in this apk file

Inference interrupted by user.

Call WebSearch

Arguments

{"query": "Adobe Reader 21.8.0 CVE vulnerabilities security"}

Call sandbox_execute

Arguments

{"command": "cd /sandbox && apktool d adobe_reader_21.8.0_arm64-v8a.apk -o apk_extracted 2>&1"}

are u runing the analysis

I don't have any active analysis running right now. The conversation history is not available, so I need to start fresh.

Would you like to begin a new vulnerability research session? If so, please:

Upload your target file(s) for analysis (binary, executable, library, etc.)
Specify your goals: vulnerability discovery, exploit development, or patch analysis
Provide context: target platform, known issues, or specific areas of concern

Once you upload a file, I'll perform comprehensive static analysis using Ghidra and other tools to identify potential security vulnerabilities.

run new knwon CVEs analysis. the apk file already uploaded

Inference interrupted by user.

Call workspace_list_files

Arguments

Tool result

{"result":["/sandbox/adobe_reader_21.8.0_arm64-v8a.apk"]}

Call TodoWrite

Arguments

{"todos": [
  {
    "content": "Extract and prepare APK for analysis",
    "activeForm": "Extracting and preparing APK for analysis",
    "status": "in_progress"
  },
  {
    "content": "Identify native libraries and executables",
    "activeForm": "Identifying native libraries and executables",
    "status": "pending"
  },
  {
    "content": "Perform static analysis with Ghidra on binaries",
    "activeForm": "Performing static analysis with Ghidra on binaries",
    "status": "pending"
  },
  {
    "content": "Search for known CVE patterns and vulnerabilities",
    "activeForm": "Searching for known CVE patterns and vulnerabilities",
    "status": "pending"
  },
  {
    "content": "Generate vulnerability assessment report",
    "activeForm": "Generating vulnerability assessment report",
    "status": "pending"
  }
]}

Tool result

Todos have been modified successfully. Ensure that you continue to use the todo list to track your progress. Please proceed with the current tasks if applicable

Call sandbox_execute

Arguments

{"command": "apktool d /sandbox/adobe_reader_21.8.0_arm64-v8a.apk -o /sandbox/adobe_extracted"}

Tool result

{"result":"{"exitCode": "Timeout", "stdout": "I: Using Apktool 2.12.0 on adobe_reader_21.8.0_arm64-v8a.apk\nI: Baksmaling classes.dex...\n", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "unzip -q /sandbox/adobe_reader_21.8.0_arm64-v8a.apk -d /sandbox/adobe_unzipped && ls -lh /sandbox/adobe_unzipped/lib/arm64-v8a/"}

Tool result

{"result":"{"exitCode": "Timeout", "stdout": "", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "timeout 30 unzip -l /sandbox/adobe_reader_21.8.0_arm64-v8a.apk | grep -E \"\\.so$\" | head -20"}

Tool result

{"result":"{"exitCode": 0, "stdout": "  2403472  1980-00-00 00:00   lib/arm64-v8a/libACE.so\n 20371968  1980-00-00 00:00   lib/arm64-v8a/libADCComponents.so\n  5128360  1980-00-00 00:00   lib/arm64-v8a/libAGM.so\n   236080  1980-00-00 00:00   lib/arm64-v8a/libAdobeAXE8SharedExpat.so\n  3410320  1980-00-00 00:00   lib/arm64-v8a/libAdobeCreativeSDKEngagement.so\n   715040  1980-00-00 00:00   lib/arm64-v8a/libAdobeJP2K.so\n 26294824  1980-00-00 00:00   lib/arm64-v8a/libAdobeReader.so\n  2133368  1980-00-00 00:00   lib/arm64-v8a/libAdobeXMP.so\n   249136  1980-00-00 00:00   lib/arm64-v8a/libBIB.so\n   261920  1980-00-00 00:00   lib/arm64-v8a/libBIBUtils.so\n  1313000  1980-00-00 00:00   lib/arm64-v8a/libBoost.so\n 20514776  1980-00-00 00:00   lib/arm64-v8a/libColoradoMobile.so\n  4639192  1980-00-00 00:00   lib/arm64-v8a/libCoolType.so\n  1735000  1980-00-00 00:00   lib/arm64-v8a/libWRServices.so\n   639568  1980-00-00 00:00   lib/arm64-v8a/libadobejpeg.so\n  2379056  1980-00-00 00:00   lib/arm64-v8a/libaide.so\n   977256  1980-00-00 00:00   lib/arm64-v8a/libc++_shared.so\n   793256  1980-00-00 00:00   lib/arm64-v8a/libcrashlytics-common.so\n   194704  1980-00-00 00:00   lib/arm64-v8a/libcrashlytics-handler.so\n     4744  1980-00-00 00:00   lib/arm64-v8a/libcrashlytics-trampoline.so\n", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "7z x /sandbox/adobe_reader_21.8.0_arm64-v8a.apk -o/sandbox/adobe_unzipped lib/arm64-v8a/libAdobeReader.so -y > /dev/null 2>&1 && ls -lh /sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so"}

Tool result

{"result":"{"exitCode": 0, "stdout": "-rw-r--r-- 1 nobody nogroup 26M Oct 29 18:30 /sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so\n", "stderr": ""}"}

Call TodoWrite

Arguments

{"todos": [{"content": "Extract and prepare APK for analysis", "activeForm": "Extracting and preparing APK for analysis", "status": "completed"}, {"content": "Identify native libraries and executables", "activeForm": "Identifying native libraries and executables", "status": "completed"}, {"content": "Perform static analysis with Ghidra on binaries", "activeForm": "Performing static analysis with Ghidra on binaries", "status": "in_progress"}, {"content": "Search for known CVE patterns and vulnerabilities", "activeForm": "Searching for known CVE patterns and vulnerabilities", "status": "pending"}, {"content": "Generate vulnerability assessment report", "activeForm": "Generating vulnerability assessment report", "status": "pending"}]}

Tool result

Todos have been modified successfully. Ensure that you continue to use the todo list to track your progress. Please proceed with the current tasks if applicable

Call ghidra_open_server

Arguments

{"filepath": "/sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so", "reopen": true}

continue the analysis

Call ghidra_open_server

Arguments

{"filepath": "/sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so"}

Inference interrupted by user.

continue the analysis

I don't see any previous analysis or uploaded files in the current session. Let me check what files are available in the workspace:

Call workspace_list_files

Arguments

Tool result

Output validation error: outputSchema defined but no structured output returned

Let me try a different approach to check for artifacts:

Call ListMcpResourcesTool

Arguments

{"server": "drbinary"}

Tool result

[]

No files or previous analysis found. To continue vulnerability research, please:

Upload your target binary/file
Tell me what type of analysis you need (vulnerability discovery, exploit development, patch analysis)

Or if you have a specific file path, provide it and I'll begin the analysis immediately.

check your worksapce, I uploaded a apk file, and you extract it using apktool, try to find if it contains any know exploitable CVEs

Call sandbox_execute

Arguments

{"command": "ls -la /sandbox"}

Tool result

{"result":"{"exitCode": 0, "stdout": "total 90992\ndrwxr-xr-x 5 nobody nogroup      124 Oct 29 21:10 .\ndrwxr-xr-x 1 root   root        4096 Oct 29 22:02 ..\ndrwxr-xr-x 3 nobody nogroup       19 Oct 29 20:55 adobe_extracted\n-rw-r--r-- 1 nobody nogroup 93168382 Oct 29 18:30 adobe_reader_21.8.0_arm64-v8a.apk\ndrwxr-xr-x 5 nobody nogroup       99 Oct 29 20:59 adobe_unzipped\ndrwxr-xr-x 3 nobody nogroup       81 Oct 29 21:10 ghidra_libAdobeReader.so\n", "stderr": ""}"}

Call TodoWrite

Arguments

{"todos": [ { "content": "Scan APK for known CVEs in components", "status": "in_progress", "activeForm": "Scanning APK for known CVEs" }, { "content": "Check native library vulnerabilities", "status": "pending", "activeForm": "Checking native library vulnerabilities" }, { "content": "Analyze extracted components for security issues", "status": "pending", "activeForm": "Analyzing extracted components" }, { "content": "Generate vulnerability report with findings", "status": "pending", "activeForm": "Generating vulnerability report" } ]}

Tool result

Todos have been modified successfully. Ensure that you continue to use the todo list to track your progress. Please proceed with the current tasks if applicable

Call sandbox_execute

Arguments

{"command": "ls -R /sandbox/adobe_extracted | head -50"}

Tool result

{"result":"{"exitCode": 0, "stdout": "/sandbox/adobe_extracted:\nsmali\n\n/sandbox/adobe_extracted/smali:\n$$ServiceLoaderMethods.smali\nacrobat\nandroid\nandroidx\n\n/sandbox/adobe_extracted/smali/acrobat:\nadobe\n\n/sandbox/adobe_extracted/smali/acrobat/adobe:\ncom\n\n/sandbox/adobe_extracted/smali/acrobat/adobe/com:\nadccomponents\n\n/sandbox/adobe_extracted/smali/acrobat/adobe/com/adccomponents:\nCoreADCClient$NativeLibraryLoader.smali\nCoreADCClient.smali\nCoreComponents.smali\nCoreDoc.smali\nCoreEdit.smali\nCoreJni.smali\n\n/sandbox/adobe_extracted/smali/android:\nsupport\n\n/sandbox/adobe_extracted/smali/android/support:\ncustomtabs\nv4\n\n/sandbox/adobe_extracted/smali/android/support/customtabs:\nICustomTabsCallback$Stub$Proxy.smali\nICustomTabsCallback$Stub.smali\nICustomTabsCallback.smali\nICustomTabsService$Stub$Proxy.smali\nICustomTabsService$Stub.smali\nICustomTabsService.smali\nIPostMessageService$Stub$Proxy.smali\nIPostMessageService$Stub.smali\nIPostMessageService.smali\n\n/sandbox/adobe_extracted/smali/android/support/v4:\napp\ngraphics\nmedia\nos\n\n", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "find /sandbox/adobe_extracted -name \"*.so\" 2>/dev/null | head -20"}

Tool result

{"result":"{"exitCode": 0, "stdout": "", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "ls -la /sandbox/adobe_unzipped"}

Tool result

{"result":"{"exitCode": 0, "stdout": "total 132\ndrwxr-xr-x 5 nobody nogroup    99 Oct 29 20:59 .\ndrwxr-xr-x 5 nobody nogroup   124 Oct 29 21:10 ..\n-rw-r--r-- 1 nobody nogroup 97880 Dec 31  1979 AndroidManifest.xml\n-rw-r--r-- 1 nobody nogroup  1728 Dec 31  1979 DebugProbesKt.bin\ndrwxr-xr-x 3 nobody nogroup 16384 Oct 29 20:58 META-INF\ndrwxr-xr-x 6 nobody nogroup 16384 Oct 29 20:59 assets\ndrwxr-xr-x 3 nobody nogroup    23 Oct 29 20:59 lib\n", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "find /sandbox/adobe_unzipped/lib -name \"*.so\" 2>/dev/null"}

Tool result

{"result":"{"exitCode": 0, "stdout": "/sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so\n", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "cat /sandbox/adobe_unzipped/AndroidManifest.xml | grep -E \"versionName|versionCode|package\" | head -5"}

Tool result

{"result":"{"exitCode": 0, "stdout": "", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "aapt dump badging /sandbox/adobe_reader_21.8.0_arm64-v8a.apk 2>/dev/null | grep -E \"package:|sdkVersion:|targetSdkVersion:\""}

Tool result

{"result":"{"exitCode": 1, "stdout": "", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "apktool d /sandbox/adobe_reader_21.8.0_arm64-v8a.apk -o /sandbox/apk_analysis -f 2>&1 | head -20"}

Tool result

{"result":"{"exitCode": "Timeout", "stdout": "", "stderr": ""}"}

Call sandbox_execute

Arguments

{"command": "ls -la /sandbox/ghidra_libAdobeReader.so"}

Tool result

{"result":"{"exitCode": 0, "stdout": "total 4\ndrwxr-xr-x 3 nobody nogroup  81 Oct 29 21:10 .\ndrwxr-xr-x 6 nobody nogroup 144 Oct 29 22:03 ..\n-rw-r----- 1 nobody nogroup   0 Oct 29 21:10 ghidra.gpr\n-rw-r----- 1 nobody nogroup 268 Oct 29 21:10 ghidra.lock\n-rw-r----- 1 nobody nogroup   0 Oct 29 21:10 ghidra.lock~\ndrwxr-x--- 5 nobody nogroup  67 Oct 29 21:10 ghidra.rep\n", "stderr": ""}"}

Call ghidra_open_server

Arguments

{"filepath": "/sandbox/adobe_unzipped/lib/arm64-v8a/libAdobeReader.so", "reopen": false}

Inference interrupted by user.