marin-m/vmlinux-to-elf
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms) observed · 2026-08-28
Health v2 · maintenance only
88/100
- Activity 86
- Release rhythm 84
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: 2.0
- age_days: 2442
- days_rel: 105
- days_push: 89
- n_releases_24m: 15
Adoption not part of the score
1805 stars · 183 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A Python CLI (with optional GUI) that recovers a fully analyzable ELF file from raw or stripped Linux kernel images (vmlinux, vmlinuz, bzImage, zImage) by extracting the embedded kallsyms symbol table. The output ELF can be loaded into reverse engineering tools like IDA Pro or Ghidra with recovered function and variable symbols.
Use cases
- recover symbols from a stripped vmlinux kernel image
- convert a raw kernel blob to an ELF for Ghidra analysis
- analyze embedded device firmware kernels in IDA Pro
- decompress a vmlinuz or bzImage kernel
- find kallsyms symbol addresses in a kernel binary
- reverse engineer an Android or IoT Linux kernel
When to choose
- you need symbol names for reverse engineering a Linux kernel image
- you only have a raw or stripped kernel binary and want an analyzable ELF
- you do embedded systems or firmware security research
When to avoid
- you need to reverse engineer userspace binaries rather than kernel images
- you want a full disassembler or decompiler - use Ghidra or IDA Pro instead
- the kernel has been deliberately hardened to remove or corrupt kallsyms
Facets
cli-tool · maturity stable
reverse-engineering parser developer-tools security reverse-engineering operating-systems security embedded-systems developer-tools python cli cross-platform kallsyms vmlinux elf firmware-analysis linux-kernel ghidra ida-pro linux
3 sources
- readme: https://github.com/marin-m/vmlinux-to-elf · fetched 2026-08-28 · 309579c1fb79
- homepage: https://fossplant.re/wiki/Main_page · fetched 2026-08-29 · a0ed9079bc39
- registry_pypi: https://pypi.org/pypi/vmlinux-to-elf/json · fetched 2026-08-29 · f8a76ed9249b
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| marin-m/vmlinux-to-elf | main | 88 |
For agents
markdown · JSON · MCP: product_card(name="marin-m/vmlinux-to-elf")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem