Showcase

• FileInsight-plugins

• https://github.com/nmantani/FileInsight-plugins

• efi_fuzz

• https://github.com/Sentinel-One/efi_fuzz

• vacation3

• https://github.com/ioncodes/vacation3-emu

Writeup

• Moving From Manual Reverse Engineering of UEFI Modules To Dynamic Emulation of UEFI Firmware

• https://labs.sentinelone.com/moving-from-manual-re-of-uefi-modules-to-dynamic-emulation-of-uefi-firmware/

• Qiling & Binary Emulation for automatic unpacking

• https://kernemporium.github.io/articles/en/auto_unpacking/m.html

• [原创]使用Qiling IDA插件解密Mirai病毒数据

• https://bbs.pediy.com/thread-262073.htm

• Part II: Analyzing a buffer overflow in the DLINK DIR-645 with Qiling framework, Part II

• https://github.com/nahueldsanchez/blogpost_qiling_dlink_2

• Part I: Analyzing a buffer overflow in the DLINK DIR-645 with Qiling framework and Ghidra.

• https://nahueldsanchez.wordpress.com/2020/08/10/analizing-a-buffer-overflow-in-the-dlink-dir-645-with-qiling-framework-and-ghidra/
• 翻译: https://xz.aliyun.com/t/8156

• Automated dynamic import resolving using binary emulation

• https://lopqto.me/posts/automated-dynamic-import-resolving

• Using Qiling to resolve obfuscated import on windows

• https://gist.github.com/y0ug/b83fcf121f80d419c8d5eb342ca31a59

• Dive deeper – Analyze real mode binaries like a Pro with Qiling Framework

• https://hackmd.io/@ziqiaokong/BkbGuCJND
• 中文; https://blog.ihomura.cn/2020/09/06/%E7%94%A8%E9%BA%92%E9%BA%9F%E6%A1%86%E6%9E%B6%E6%B7%B1%E5%85%A5%E5%88%86%E6%9E%90%E5%AE%9E%E6%A8%A1%E5%BC%8F%E4%BA%8C%E8%BF%9B%E5%88%B6%E6%96%87%E4%BB%B6

• How to reproduce CVE-2020-8962 with Qiling Framework

• https://ucgjhe.github.io/post/cve_2020_8962/

• Qiling For Malware Analysis: Part 1 and Part 2

• https://n1ght-w0lf.github.io/tutorials/qiling-for-malware-analysis-part-1/
• https://n1ght-w0lf.github.io/tutorials/qiling-for-malware-analysis-part-2/

• PE Emulation With Code Coverage Using Qiling and Dragon Dance

• https://pwnage.io/pe-code-coverage-emulation-qiling/
• 翻译: https://bbs.pediy.com/thread-261841.htm

• Automated malware unpacking with binary emulation

• https://lopqto.me/posts/automated-malware-unpacking

• ByteBandits CTF 2020 - Autobot

• https://chinmaydd.in/2020/04/13/Autobot/

• Qiling Scripting and Simple RE Task

• https://trib0r3.github.io/posts/qiling-scripting-and-simple-re-task/

• Certego research at the HITB Security Conference:

• https://www.certego.net/en/news/certego-research-at-the-hitb-security-conference/

• EFI_DXE_Emulator: Qiling support in the works!

• https://firmwaresecurity.com/2020/05/06/efi_dxe_emulator-qiling-support-in-the-works/

• 多架构二进制 Fuzzing 的几种环境搭建

• https://www.zybuluo.com/H4l0/note/1666939

• Phân tích mẫu mã độc khai thác lỗ hổng Microsoft Office Equation Editor

• https://blog.viettelcybersecurity.com/phan-tich-mau-ma-doc-khai-thac-lo-hong-microsoft-office-equation-editor/

• Qiling Fuzzer

• https://github.com/domenukk/qiling/blob/unicornafl/afl/README.md

• Csaw CtF

• https://github.com/re-fox/capture_the_flag/blob/master/rabbithole/rabbithole_qiling.py

Media

• https://www.kitploit.com/2020/02/qiling-advanced-binary-emulation.html
• https://hakin9.org/qiling-advanced-binary-emulation-framework/
• https://infoseccampus.com/sectools-e19-kaijern/

Conference

• https://conference.hitb.org/hitb-lockdown002/virtual-labs/virtual-lab-qiling-framework-learn-how-to-build-a-fuzzer-based-on-a-1day-bug/
• https://www.blackhat.com/us-20/arsenal/schedule/index.html#qiling-framework-from-dark-to-dawn-----enlightening-the-analysis-of-the-most-mysterious-iot-firmware--21062
• https://www.blackhat.com/asia-20/arsenal/schedule/index.html#qiling-lightweight-advanced-binary-analyzer-19245
• https://nullcon.net/website/goa-2020/speakers/kaijern-lau.php
• https://conference.hitb.org/lockdown-livestream/
• https://www.defcon.org/html/defcon-27/dc-27-demolabs.html#QiLing
• https://hitcon.org/2019/CMT/agenda
• https://zeronights.ru/report-en/qiling-io-advanced-binary-emulation-framework/

Youtube

• Official Youtube Channel: https://www.youtube.com/playlist?list=PL8ElQv7Jg-7gjpibNEwIi-TrnkS78tG7v
• Talk In HITBLockdown 002, July 2020: https://www.youtube.com/watch?v=e3_T3KLh2NU
• Talk In HITBLockdown 001, April 2020: https://www.youtube.com/watch?v=2fHCrWduGuw
• Talk In Nullcon, March 2020: https://www.youtube.com/watch?v=K_eyXesGJbQ
• Talk in zeronights, Nov 2019: https://www.youtube.com/watch?v=xf0i9kfHKDI