Qiling Framework

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Qiling Framework is ranked #29 of 73 in reverse engineering tools on Inferse. It runs on Linux, macOS, Self-hosted, Windows.

Compared on reverse engineering tools

Free plan: Yesqiling.io
Decompiler: Noqiling.io
Firmware analysis: Yesqiling.io
Analysis mode: dynamicqiling.io
Plugin API: Yesqiling.io
Supported platforms: Linux, macOS, Windows, FreeBSD, DOS, UEFIqiling.io
Supported architectures: x86, x86_64, ARM, ARM64, MIPS, 8086qiling.io

Facts

Purpose: Qiling combines binary emulation and instrumentation for reverse engineering and security analysis.qiling.io · 4 Oct 2026
Emulation: It emulates machine code in an isolated environment and supports cross architecture and platform debugging.docs.qiling.io · 4 Oct 2026
Architectures and formats: The documentation lists x86, x86_64, ARM, ARM64, MIPS and 8086 architectures, and PE, Mach-O, ELF and COM file formats.docs.qiling.io · 4 Oct 2026
Instrumentation: Hooks can be set at instruction, basic block, memory access, exception, syscall and I/O levels.docs.qiling.io · 4 Oct 2026
APIs: The framework provides APIs for registers, memory, filesystems, operating systems, debugging, and saving or restoring execution state.qiling.io · 4 Oct 2026
Hot patching: Qiling can dynamically hot patch running code, including loaded libraries.docs.qiling.io · 4 Oct 2026
IDA Pro: The Qiling IDA plugin can emulate the current binary in IDA, display live emulation context, run custom scripts, save and load snapshots, and deobfuscate code.docs.qiling.io · 4 Oct 2026
Underlying engine: Qiling uses Unicorn to emulate CPU instructions and adds operating system awareness, executable loaders, dynamic linking, syscall handling and I/O handling.github.com · 4 Oct 2026
Install options: The installation guide documents installation with pip, from source, and through a Docker image.docs.qiling.io · 4 Oct 2026
Windows files: The installation guide says Qiling does not bundle Microsoft Windows DLL files or registry data due to distribution restrictions; users must provide them.docs.qiling.io · 4 Oct 2026
Known limitation: The FAQ says a binary may require a syscall or OS API that is not implemented, in which case users may need to implement it.docs.qiling.io · 4 Oct 2026
License: The project is free software under GPL version 2 or, at the user's option, a later version.github.com · 4 Oct 2026
Intended users: The introduction identifies security researchers, university students and university lecturers as users of Qiling.qiling.io · 4 Oct 2026
Support and contact: The project lists [email protected] and @qiling_io as contact channels.github.com · 4 Oct 2026