Qiling Framework

7.4easy start · #2 of 73
in Reverse Engineering Tools

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Windows.

Qiling Framework is ranked #2 of 73 in reverse engineering tools on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Windows. There is a free plan.

Qiling Framework plans and pricing

All plans

Qiling Framework (GPLv2) Free Free software under GPLv2 docs.qiling.io · 4 Oct 2026

Compared on reverse engineering tools

Free plan: Yes
Decompiler: No
Firmware analysis: Yes
Analysis mode: dynamic
Plugin API: Yes
Supported platforms: Linux, macOS, Windows, FreeBSD, DOS, UEFI
Supported architectures: x86, x86_64, ARM, ARM64, MIPS, 8086

Best Qiling Framework alternatives

See all 12

JEB 0 of 4 in the starter kit Lesson 17.9 radare2 0 of 4 in the starter kit Lesson 37.4 rev.ng 0 of 4 in the starter kit Lesson 47.4 Rizin 0 of 4 in the starter kit Lesson 57.4 Binary Ninja 0 of 4 in the starter kit Lesson 67.3 Cutter 0 of 4 in the starter kit Lesson 77.2

The record

Purpose: Qiling combines binary emulation and instrumentation for reverse engineering and security analysis.
Emulation: It emulates machine code in an isolated environment and supports cross architecture and platform debugging.
Architectures and formats: The documentation lists x86, x86_64, ARM, ARM64, MIPS and 8086 architectures, and PE, Mach-O, ELF and COM file formats.
Instrumentation: Hooks can be set at instruction, basic block, memory access, exception, syscall and I/O levels.
APIs: The framework provides APIs for registers, memory, filesystems, operating systems, debugging, and saving or restoring execution state.
Hot patching: Qiling can dynamically hot patch running code, including loaded libraries.
IDA Pro: The Qiling IDA plugin can emulate the current binary in IDA, display live emulation context, run custom scripts, save and load snapshots, and deobfuscate code.
Underlying engine: Qiling uses Unicorn to emulate CPU instructions and adds operating system awareness, executable loaders, dynamic linking, syscall handling and I/O handling.
Install options: The installation guide documents installation with pip, from source, and through a Docker image.
Windows files: The installation guide says Qiling does not bundle Microsoft Windows DLL files or registry data due to distribution restrictions; users must provide them.
Known limitation: The FAQ says a binary may require a syscall or OS API that is not implemented, in which case users may need to implement it.
License: The project is free software under GPL version 2 or, at the user's option, a later version.
Intended users: The introduction identifies security researchers, university students and university lecturers as users of Qiling.
Support and contact: The project lists [email protected] and @qiling_io as contact channels.
Price from: Free

Where it ranks on The Geeks Club

Best Reverse Engineering Tools in 2026#2 of 73

Is Qiling Framework yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Qiling Framework

Sources

qiling.io/2023/08/04/intro/· checked 4 Oct 2026
docs.qiling.io/en/latest/· checked 4 Oct 2026
docs.qiling.io/en/latest/ida/· checked 4 Oct 2026
github.com/qilingframework/qiling· checked 4 Oct 2026
docs.qiling.io/en/latest/install/· checked 4 Oct 2026
docs.qiling.io/en/latest/faq/· checked 4 Oct 2026