vmlinux
Decompressed kernel image
FROM BOOT IMAGE TO DEBUGGER
Make your kernel readable.
Unpack a kernel. Recover its symbols. Get back to debugging.
All in your browser, powered by WebAssembly.
vmlinuz→vmlinux→symbols
01 Kernel image
INPUTDrop your kernel image here
vmlinuz, bzImage, vmlinux, Image, or a compressed kernel
Up to 256 MiB · Your file stays on this deviceJust exploring?
Loading WASM core…
Processing kernel
RECOVERY OUTPUT
Ready for the next step.
System.map
Recovered names and addresses
Symbolized ELF
ELF with a restored .symtab
| ADDRESS | TYPE | SYMBOL NAME |
|---|
No symbols match this search.
Find the kernel inside.
Scan boot wrappers for gzip, XZ, LZMA, bzip2, LZ4, and Zstandard payloads. Already have a vmlinux ELF? Start there.
Read what remains.
Decode embedded kallsyms tables into symbol names, types, and link-time addresses, even when .symtab is stripped.
Bring symbols back.
Export an ELF for GDB and reverse engineering tools. Symbol recovery does not recreate DWARF or source-level debug data.
Compatibility and limitations
Supports standard token-compressed kallsyms layouts with absolute, base-relative, absolute per-CPU, and PC-relative addresses, in 32- or 64-bit and either byte order. Recovery validates names, markers, and address arrays. Some vendor layouts and uncompressed OpenWrt tables are unsupported. Zstandard uses a pure Rust decoder with checksum validation and a 128 MiB history-window limit. LZO is detected but its decoder is not included in this build. The output limit is 512 MiB; total memory use is higher and depends on the device.
Existing ELF load mappings are preserved. Raw ELF reconstruction requires an explicit architecture and load base; it creates one broad load segment and does not infer relocations, BSS, or the original section layout. Apply the target's KASLR slide separately. Recovered symbol sizes are left at zero because exact sizes are unavailable.