Skip to content

Latest commit

 

History

History
18 lines (12 loc) · 495 Bytes

README.md

File metadata and controls

18 lines (12 loc) · 495 Bytes

Vmlinux loader for Ghidra

This extension can be used to load vmlinux kernel images into Ghidra. Output from droidimg is required.

This version is compatible with Ghidra 10.3+.

Usage

  1. Run droidimg to get symbol file
    vmlinux.py --json <vmlinux> > <vmlinux>.sym.json
  1. Make sure the generated .sym.json file is in the same directory of the image file.
  2. Import the image file using Ghidra, and choose Vmlinux Loader as file format.
  3. Run auto analysis

Notes