C11 · POSIX · OPEN SOURCE

Small tools.
Rebuilt properly.

Twenty-seven focused command-line tools now ship in both native C11 and readable Python—with bounded inputs, Unix administration, threat hunting, and tests designed to break them.

Build the toolkit View source ↗

2×27: C + Python editions
bounded: input budgets
0: shell calls

pydev — zsh

$ git clone https://github.com/drmbios/pydev
$ cd pydev && make
✓ built 27 native tools

$ bin/cntr README.md
a 131
b 12
c 38
▋

STRICT WARNINGS · ASAN · UBSAN

C11 ◆ PYTHON 3.9+ ◆ SQLITE ◆ POSIX ◆ ADDRESSSANITIZER ◆ MAKE ◆ ZERO SHELL INJECTION

01 / THE TOOLBOX

One job. One binary.

Each utility stays deliberately small, composable, and predictable—the Unix philosophy without the mystery behavior.

cntr

Fast, case-insensitive ASCII letter frequency analysis for any text file.

cntr FILE

••••

codebreaker

A Mastermind-style four-digit terminal game with secure randomness and feedback.

codebreaker [ATTEMPTS]

<a>

parser_html

Extract quoted link destinations from bounded HTML input in linear time.

parser_html FILE

pip

qpipper

Search or install packages through a shell-free, injection-resistant launcher.

qpipper ACTION PACKAGE

{ }

JSON viewers

Inspect compact or formatted JSON with explicit input and nesting limits.

readjson FILE

sql

Store and update question-answer entries using prepared SQLite statements.

sql DB add NAME ANSWER

contacts

Pull names and telephone numbers from vCard files into a clean summary.

contacts FILE.vcf

X/O

ttt

A complete local two-player tic-tac-toe game with guarded input.

ttt

write2file

A bounded, error-aware text writer for quick terminal workflows.

write2file FILE TEXT

CRC

checksum

Calculate standard CRC-32 values for fast file integrity comparisons.

checksum FILE...

hexview

Inspect binary data as aligned hexadecimal bytes and printable ASCII.

hexview FILE [MAX_BYTES]

str

stringsx

Extract meaningful printable runs from bounded binary input.

stringsx FILE [MIN_LENGTH]

***

randpass

Generate secure passwords from unbiased operating-system randomness.

randpass [LENGTH]

SYS

syscallx

Translate Linux x86-64 syscall numbers into names and plain-language explanations.

syscallx NUMBER...

lsx

List files with numeric permissions and true recursive directory sizes.

lsx [-aSr] [PATH]

traceflow

Trace syscalls and forked process dependencies as an indented tree.

traceflow COMMAND [ARG...]

CPU

syswatch

Combine CPU, memory, load, disk, and network graphs with separate CSV logs.

syswatch --count 10 --log logs

USR

sessionx

Map logged-in users to their processes and safely dry-run session termination.

sessionx --terminate USER

PID

procexp

Inspect process owners, memory, threads, executables, and open descriptor counts.

procexp [PID]

CPU

coreinfo

Summarize kernel, architecture, processor, page size, CPU count, and physical memory.

coreinfo

CLK

clockres

Report the real resolution of available POSIX realtime, monotonic, and CPU clocks.

clockres

numconv

Convert integers among decimal, hexadecimal, octal, and binary with overflow checks.

numconv NUMBER

linkscan

Discover all hard links sharing a target file's device and inode.

linkscan FILE [ROOT]

RUN

autostartx

Inventory standard Linux and macOS startup entries without loading or executing them.

autostartx

WHO

whoisx

Query WHOIS services with input validation, timeouts, and a bounded response.

whoisx example.com

antivermis

Hunt malware, miners, risky persistence, and rootkit indicators with bounded heuristics and hash-verified signature updates.

antivermis --check-update URL DB

02 / RECENT UPDATES

One week.
Four focused releases.

The project now maintains matching Python and C11 editions, with security boundaries documented and exercised in both.

AUG 23

Python parity

Added independent Python 3.9+ counterparts for every user-facing native tool, including Antivermis and the Linux administration suite.

make python-check

AUG 19

Threat hunting

Added Antivermis signature updates with HTTPS-only remote feeds, SHA-256 verification, parser validation, and atomic installation.

antivermis --update-db URL DB

AUG 15

SYS

Unix utility suite

Added Linux administration plus six cross-platform Sysinternals/NirSoft-inspired terminal tools.

traceflow · syswatch · coreinfo

AUG 11

SAFE

Hardening pass

Added binary tools, optional SQLite builds, parser limits, abuse tests, and sanitizer CI.

make sanitize

AUG 09

C11

Native foundation

Converted the repaired Python sketches into strict C11 tools and launched the GitHub Pages site.

make && make check

03 / BUILT DEFENSIVELY

Inputs are hostile.
Tools should be calm.

These utilities assume files can be oversized, strings malformed, and arguments malicious. Limits are part of the product—not an afterthought.

Explore the abuse tests ↗

16–64 MiB
Bounded file reads
General readers cap input at 16 MiB; Antivermis defaults to 32 MiB and hard-caps files at 64 MiB.
128
Validated JSON depth
Grammar, nesting, and output growth are checked before rendering.
execvp
No command shell
Package arguments never become executable shell syntax.
ASAN
Memory checked
Sanitizers, special-file rejection, and symlink tests run across the suite.

04 / GET STARTED

Three commands.

You need a C11 compiler, Make, and the SQLite 3 development library. Python is only required for the optional pip wrapper.

BUILD

$ git clone https://github.com/drmbios/pydev.git
$ cd pydev
$ make && make check

READMEFull documentation → LICENSEApache 2.0 → CHANGELOGAugust 9–16 history → CONTRIBUTEOpen a pull request →

Small tools.Rebuilt properly.