This extension can be used to load vmlinux kernel images into Ghidra. Output from droidimg is required.
This version is compatible with Ghidra 10.3+.
- Run droidimg to get symbol file
vmlinux.py --json <vmlinux> > <vmlinux>.sym.json
- Make sure the generated .sym.json file is in the same directory of the image file.
- Import the image file using Ghidra, and choose Vmlinux Loader as file format.
- Run auto analysis