QIRA is an interactive runtime analysis environment designed as an alternative to tools such as strace and GDB. It records program execution and lets users navigate through the resulting trace rather than inspecting only the current process state. Its interface combines a visual timeline with instruction views, registers, data changes, a hex editor, and syscall information. Users can follow instruction addresses, data accesses, function activity, and execution forks. The project integrates QEMU-based tracing and supports additional tracing backends, with libraries available for several CPU architectures. Names, comments, static annotations, keyboard navigation, and Docker-based deployment support deeper reverse-engineering workflows.
Features
- Interactive program execution tracing
- Visual execution timeline navigation
- Instruction and register inspection
- Memory and data-access tracking
- Execution fork and syscall analysis
- Multiarchitecture QEMU-based tracing
Project Samples
