Ghidra Native Analysis

Analyze native libraries (.so files) with Ghidra.

Workflow

1. Import libAES.so
2. Auto-analyze
3. Search for "encrypt", "key", "AES"
4. Use Decompiler

---

Next Step

Continue with Phase 4: PoC Development.