Add the option to analyze kernelcache in ghidra

blacktop / ipsw

iOS/macOS Research Swiss Army Knife

https://blacktop.github.io/ipsw

MIT License

1.99k stars 155 forks source link

Add the option to analyze kernelcache in ghidra #351

Open Luxvao opened 1 year ago

Luxvao commented 1 year ago

Could it be added? I think ghidra is a good alternative to ida so I think it should be added.

blacktop commented 9 months ago

I'd ❤️ to add ghidra support as well. Not sure when I'll have time, but I def like the idea. It's been a while since I've used ghidra for kernel analysis, I think you need to run a LOT of fixup scripts on it to make the output usable? Not sure if that's still the case?

If so what plugins/scripts do we need to add as well?

Luxvao commented 9 months ago

I’ve been using plain ghidra without any plugins for my ctfs and stuff, but I’m not sure what plugins are there for kernel analysis. I’m not experienced in kernel analysis at all (I’m trying to get into it). A quick google search shows this one framework called ghidra_kernelcache which supports ios 12, 13, 14 and 15.