frida_memory_dump_regions
Dump readable memory regions from a target process to disk, filtered by protection flags. Each region saved as a .bin file for offline analysis.
Instructions
Dump all readable memory regions from a target process to disk.
Enumerates memory ranges matching filter_protection, reads each
via Memory.readByteArray(), and saves to individual .bin files in
output_dir named <base_address>_<size>.bin.
target: process name or pid (string).
output_dir: local directory for dump files (created if needed).
filter_protection: Frida protection filter (default 'r--').
Use 'rwx' for only fully writable+executable regions, 'rw-'
for writable regions, etc.
Regions larger than 64MB are skipped. 5-minute timeout. Returns list of dumped regions with local file paths.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| output_dir | Yes | ||
| filter_protection | No | r-- |