Usecases

Qiling Framework Usecases and Resources

This page provides a curated list of real-world use cases, tutorials, and other resources from the Qiling community. These examples showcase the power and versatility of the framework.

Showcase: Real-World Tools Using Qiling

• Dragonfly: A next-generation sandbox for malware analysis.
• Karton Unpacker: An automated unpacking and classification system for malware.
• efi_fuzz: A fuzzer for UEFI firmware.
• EDL: Tools for interacting with Qualcomm Emergency Download (EDL) mode, often used in mobile device security research.

Tutorials and Labs

• Qiling Lab 01: A hands-on lab for learning the basics of Qiling.
• Arm64 binary emulation using Qiling Framework: A video tutorial on emulating ARM64 binaries.

Academic Papers and Research

• On the Effectiveness of Binary Emulation in Malware Classification: A paper discussing the use of Qiling for malware classification.
• FIRMGUIDE: Boosting the Capability of Rehosting Embedded Linux Kernels: Research on using Qiling for rehosting and analyzing embedded Linux kernels.

Conference Presentations

Qiling has been featured in numerous security conferences. Here are a few highlights:

• Black Hat USA 2019: Fuzzing The Unfuzzable With Qiling
• HITB 2020: Emulating The Unemulatable
• DEF CON 28: Hacking IoT with Qiling

Community Writeups and Blog Posts

The community has produced many excellent writeups. Here are a few examples that showcase different use cases:

• Analyzing a MIPS-based IoT device firmware
• Fuzzing a closed-source binary with Qiling and AFL++
• Unpacking Android malware with Qiling

For a more comprehensive list of resources, please see the original GitHub issue.