Qiling - Sample Codes

cd examples

Shellcode Executor

• Multi ARCH, Cross Platform Shellcode Executor

$ python3 shellcode_run.py

---

X86_64 FreeBSD binaries

• X86_64 FreeBSD binary, simple helloworld

$ python3 hello_x8664_freebsd.py

---

X86_64 macos binaries

• X86_64 macos binary, simple helloworld

$ python3 hello_x8664_macos.py

---

X86 macos binaries

• X86 macos binary, simple helloworld

$ python3 hello_x86_macos.py

---

X86_64 Linux binaries

• X86_64 Linux binary, helloworld with manual disassembler output

$ python3 hello_x8664_linux_disasm.py

• X86_64 Linux binary, simple helloworld

$ python3 hello_x8664_linux.py

---

X86 Linux binaries

• X86 Linux binary, reversing.kr linux crackme bruteforce solver

$ python3 crackme_x86_linux.py

• X86 Linux binary, simple helloworld

$ python3 hello_x86_linux.py

---

X86 Windows binaries

• X86 Windows binary, ctf challage from BJWXB2019, bruteforce solver

$ python3 crackme_x86_windows.py

• X86 Windows binary, example, how to use ql.patch and ql.set_callback

$ python3 crackme_x86_windows_setcallback.py

• X86 Windows binary, example, ql.set_callback

$ python3 crackme_x86_windows_unpatch.py

• X86 Windows binary, helloworld with debug mode on

$ python3 hello_x86_windows_debug.py

• X86 Windows binary, with multithreading

$ python3 multithreading_x86_windows.py

• X86 Windows binary, catching wannacry's killerswtich

$ python3 wannacry_x86_windows_setexit.py

---

X86_64 Windows binaries

• X86_64 Windows binary, example on how to set output

$ python3 disasm_x8664_windows.py

---

ARM64 Linux binaries

• ARM64 Linux binary, exit when there is a write to memory 0x555555566260

$ python3 exitmemwrite_arm64_linux.py

• ARM64 Linux binary, simple helloworld

$ python3 hello_arm64_linux.py

---

ARM binaries

• ARM Linux binary, simple helloworld

$ python3 hello_arm_linux.py

• ARM Linux binary, simple stack overflow

$ python3 bofsample_arm_linux.py

• ARM Linux binary, simple helloworld with debug mode

$ python3 hello_arm_linux_debug.py

---

MIPS32EL binaries

• MIPS32EL Linux binary, simple helloworld

$ python3 hello_mips32el_linux.py