QBDI/QBDI

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1815 stars · 227 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

QBDI (QuarkslaB Dynamic binary Instrumentation) is a modular, cross-platform, cross-architecture DBI framework built on LLVM, supporting x86, x86-64, ARM, and AArch64. It offers C/C++ APIs plus Python and Frida bindings for scripting runtime instrumentation of binaries.

Use cases

• instrument a binary at runtime to trace executed instructions
• build custom reverse engineering tools with Frida and QBDI
• analyze malware behavior by hooking instructions on x86-64 or ARM
• script dynamic instrumentation in Python with PyQBDI
• trace memory accesses in an Android or iOS native app
• inject instrumentation code into a process via LD_PRELOAD

When to choose

• you need a modern DBI framework with mobile platform (Android/iOS) support
• you want Python or Frida bindings to script instrumentation
• you need cross-architecture coverage including ARM and AArch64
• you want to build custom analysis tools rather than use a monolithic debugger

When to avoid

• your target relies heavily on signals, multithreading, or C++ exceptions, which QBDI does not handle
• you need a turnkey instrumentation tool with built-in injection on all platforms
• you only need simple function-level hooking that Frida alone covers

Facets

library · maturity active

reverse-engineering security sdk developer-tools reverse-engineering security developer-tools windows python cpp rust dbi dynamic-binary-instrumentation llvm frida pyqbdi code-injection tracing linux macos android ios

Member repositories

For agents

markdown · JSON · MCP: product_card(name="QBDI/QBDI")