Building advanced security applications on Qiling.io | KaiJern Lau & Quynh Nguyen Anh | NULLCON 2020

This talk introduces Qiling.io, a versatile sandbox emulator framework that leverages a rich Python API to facilitate the development of customizable analysis tools. The speakers delve into the architecture of Qiling, discussing key components such as the binary loader, dynamic linker, and OS environment that underpin its binary emulation capabilities. They highlight the framework's plugin-based design, which allows for seamless support of various platforms, including IoT firmware and embedded operating systems. Additionally, the presentation outlines how users can quickly create advanced applications, such as cross-platform fuzzers and malware analysis tools, fostering innovation in security research. The session concludes with insights into upcoming features in the forthcoming release of Qiling and its future development trajectory.