search

nforest / droidimg

Android/Linux vmlinux loader
328 stars 90 forks source link

Hi can u try disassemble this? #26

Closed ghost closed 5 years ago

ghost commented 5 years ago

It's not working for me when use ur script this file isn't disassembling

Not working for me If it works for you than can you try giving me the database of this exported from Ida ?

idl3r commented 5 years ago

Actually, it works. You need to extract the real linux kernel image from the boot.img first. You can do that with abootimg, binwalk, dd and gzip, all are common utilities. Search XDA for tutorials.

I'm using Ghidra now, this is the output for Ghidra load with GhidraVmlinuxLoader. For practice, you shall extract the kernel image (vmlinux) yourself. vmlinux.sym.json.zip

Droidimg was designed for experienced researchers. But seems there are wider user base of it now. I'll update the README with a section describing how to quickly check if a file is a valid vmlinux image.

ghost commented 5 years ago

Dude I have extracted image from kernel with one of the utilities you have mentioned above and it still not showing on Ida page

idl3r commented 5 years ago

The loader did almost no check on image to determine whether is loadable. In short, it is more likely to be an IDA issue. My suggestion is either contacting IDA support, or try Ghidra/R2/Binja