KallRecon

discovers and reconstructs the kallsyms symbol table from kernel image memory on ARM64 GKI. locates kallsyms_lookup_name to provide symbol resolution from within an LKM. inspired by ksymless and depends only on sprint_symbol.

on kallsyms: xcellerator

requirements

• ARM64 device with GKI kernel
• sprint_symbol exported

credits

Thanks to 汐の月 for providing the device for GKI 6.6 testing.

Thanks to 阿尔托莉雅·潘德拉贡 for providing the device for GKI 6.1 testing.

Thanks to 小初 for providing the device for GKI 6.1 testing.

Thanks to haohao3001 for providing the device for GKI 6.12/5.15 testing.

Thanks to mx_wj for providing the device for GKI 6.1 testing.

Thanks to pubglite55 for providing the device for GKI 5.15 testing.

license

GPL-2.0