Dump & reconstruct Android native libraries (.so) from process memory via ADB. Single Python script — dumps memory region-by-region, then rebuilds ELF section headers for IDA/Ghidra analysis. Supports ELF32/ELF64, packed/protected libraries (UPX, 360 Jiagu, Tencent). No compilation needed.
android adb reverse-engineering dynamic-analysis ida-pro elf arm64 android-security memory-dump security-research so-dump ghidra native-library elf-fixer
-
Updated
May 13, 2026 - Python