Skip to content
Analysis scripts for Ghidra to work with Android NDK libraries.
Java CSS HTML
Branch: master
Clone or download
Cannot retrieve the latest commit at this time.
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
JNIAnalyzer Add TraceRegisterNatives.java script. Dec 27, 2019
.gitignore
README.md

README.md

JNIAnalyzer

This Ghidra extension contains various scripts that assists in analyzing Android NDK applications.

Scripts

JNIAnalyzer.java

This script parses the output of FindNativeJNIMethods and applies the function signature to all matching functions in the binary.

Running the JNIAnalyzer.java extension script will overwrite any function return types, parameter names and parameter types that was already in place. If you want the script to skip a specific function, annotate it with JNIAnalyzer:IGNORE in the comment.

Write-up: Ghidra Plugin: JNIAnalyzer

TraceRegisterNatives.java

This script parses the output of trace_registernatives applies the results to the Ghidra project.

Write up coming soon.

RegisterNatives.java (Experimental)

This script looks for calls to RegisterNatives within a function and sets the JNINativeMethod structure type in the appropriate locations within the binary. Ghidra's P-Code API is used to find references to RegisterNatives as the function is usually resolved at runtime.

This script is currently very much experimental / use at your own risk.

You can’t perform that action at this time.