PyQBDI is a set of bindings that you can interact with through the use of a preloaded library using LD_PRELOAD (linux) or DYLD_INSERT_LIBRARIES (macOS). PyQBDI offers you a way to script your instrumentation, allowing a fast and easy way to design tools. It also lets you interact with python environment, so you can, for example, post process any data you collected during the instrumentation.


Because PyQBDI is a bindings on top of QBDIPreload, it has the same limitations as QBDIPreload wich are describred in QBDIPreload.


It is not possible to instrument a python process using PyQBDI because there will be a conflict between the host and the guest both trying to use the python runtime as described in Limitations. We would recommend directly using QBDIPreload.

We provide examples along with the API documentation in the following sections.