Skip to content

idl3r/GhidraVmlinuxLoader

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 

Repository files navigation

Vmlinux loader for Ghidra

This extension can be used to load vmlinux kernel images into Ghidra. Output from droidimg is required.

This version is compatible with Ghidra 10.3+.

Usage

  1. Run droidimg to get symbol file
    vmlinux.py --json <vmlinux> > <vmlinux>.sym.json
  1. Make sure the generated .sym.json file is in the same directory of the image file.
  2. Import the image file using Ghidra, and choose Vmlinux Loader as file format.
  3. Run auto analysis

Notes