Explore the internals of Qiling, a sandbox emulator framework with powerful Python APIs for building customizable analysis tools. Dive into the architecture of Qiling, including its binary loader, dynamic linker, OS environment, and system components. Learn how the plugin-based design enables easy extension to support new platforms like embedded OS and baseband firmware. Discover how to leverage Qiling to create advanced security applications such as cross-platform fuzzers, malware analyzers, and IoT emulation tools for vulnerability research. Gain insights into upcoming features in Qiling 1.0 and future development directions. Presented by KaiJern Lau, Lab Director at The ShepherdLab, and Dr. Nguyen Anh Quynh, founder of Capstone, Unicorn, and Keystone projects, this 44-minute talk from NULLCON 2020 provides a comprehensive look at building sophisticated security tools with Qiling.
Overview
Syllabus
Building advanced security applications on Qiling.io | KaiJern Lau & Quynh Nguyen Anh | NULLCON 2020
Taught by
nullcon