PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android Native Library Analysis with QBDI

blog.quarkslab.com | research | #android | #reverse-engineering | #tooling | #dynamic-instrumentation | #qbdi | #jni
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How QBDI's dynamic instrumentation, now with Thumb/Thumb2 and NEON support, helps reverse obfuscated Android JNI libraries, switching between instrumented code and native calls via ExecBrocker.
Published
Collected

Related coverage

research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
research · blog.quarkslab.com
Why are Frida and QBDI a Great Blend on Android?
The post shows how combining Frida and QBDI gives instruction-level visibility into obfuscated native Android functions, based on a Pass The Salt 2020 talk about tracing JNI code.
research · blog.quarkslab.com
QBDI 0.7.0
QBDI 0.7.0 adds x86 support; the post walks through a Tencent packer use case where QBDI and LIEF instrument the decoding routine to recover a protected .text section on Android.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
research · blog.quarkslab.com
Let’s Go into the rabbit hole (part 3) — the challenges of dynamically hooking Golang programs
Part three of Quarkslab's Go hooking series: implementing function hooks to dynamically instrument Golang programs, and tackling the approach's limitations using FFI (foreign function interfaces).
Back