Projects on shonk.sh

memshonk

Mon, 01 Jan 0001 00:00:00 +0000

memshonk is an experimental command-line debugger companion that tries to fill the functionality gaps between debuggers. Think of it as a cross between gdb, rizin, and Cheat Engine. It is not meant to replace a debugger, but to sit alongside one.

memshonk is in early development. There are bugs and missing functionality.

Inspiration

The gap you kept running into: what your debugger couldn’t do that sent you reaching for a second tool.

oki

Mon, 01 Jan 0001 00:00:00 +0000

oki applies pledge(2) and unveil(2) restrictions to a target program on OpenBSD, reducing the blast radius of a security vulnerability in that program.

Inspiration

Why you built oki: the program you wanted to contain, and what made wrapping pledge and unveil from the outside the right approach.

How it works

Calling pledge on a program restricts the set of system calls it is allowed to make. Each set of permitted calls is a promise, and promises can be combined. If the program makes a call outside its promises, the kernel terminates it immediately and delivers a core file if it can.

blaj

Mon, 01 Jan 0001 00:00:00 +0000

blaj is a tool for creating a programmable trainer for speedrunning games. It saves and restores chunks of a game’s memory on a keypress, and can write data to a designated memory location the same way.

Inspiration

Why you built blaj: the practice loop that was too slow, the skip you kept having to reset the whole level to attempt.

How it works

Once a useful piece of game state is located with a memory scanner like Cheat Engine, blaj can save that region and restore it later, teleporting the player back to a particular spot, for example. That turns “reset and replay the level” into a single keypress, so a skip can be drilled consistently instead of once every few minutes.

example-memp-loader

Mon, 01 Jan 0001 00:00:00 +0000

memp loader (medge multiplayer loader) is a DLL written in Rust that loads the Mirror’s Edge multiplayer mod into the game at startup.

Inspiration

Why a loader was needed: what wasn’t working about getting the mod into the game the usual way.

How it works

The loader gets into the game through phantom DLL hijacking. Mirror’s Edge tries to load AgPerfMon.dll, a DLL that isn’t actually present on the system. Because nothing satisfies that name, a DLL placed in the search order under it gets loaded instead, so this project builds itself as AgPerfMon.dll and the game loads it without being asked to.

steps-boi

Mon, 01 Jan 0001 00:00:00 +0000

steps boi is a Discord bot that sums the steps logged by a community in a Discord channel.

Inspiration

The step challenge this was built for, and why a bot beat a spreadsheet.

How it works

Someone posts their steps as a message:

!steps 12234

Reacting to that message with a 👍 counts it, and the bot prints an updated progress bar as steps accumulate. Submissions above a threshold, 5,000 steps for example, earn a star.

wgui

Mon, 01 Jan 0001 00:00:00 +0000

wgui is a simple graphical user interface for wgu that helps you manage and control WireGuard VPN tunnels.

Inspiration

Why you built wgui: what editing wgu configurations by hand was like, and the point at which it wanted a window of its own.

How it works

wgu creates WireGuard tunnels without needing superuser privileges. wgui puts a window in front of it, so tunnels can be created, saved, edited, and switched between without hand-editing configuration files or remembering command lines.

rizin-tools

Mon, 01 Jan 0001 00:00:00 +0000

A collection of tools for working with the rizin disassembler and debugger. Each tool lives in its own directory with its own README.

My contributions

Which tools you worked on and what you added. This repo is stephen-fox’s, so this section is the one worth writing first.

The tools

library-exports: generates a list of a library’s exported symbols and their signatures. Useful for developing a proxy library.
rz-ctx: an experimental utility that captures rizin’s analysis in JSON objects with documented schemas, so analysis data can be committed to source control and consumed by other tools.
rz-mcp: an experimental MCP server for use with AI tools. Must be sandboxed, since code injection is possible.
rz-paths: finds code paths between a child symbol and a parent symbol using rizin.
vstack: visualizes the stack variables of a function based on rizin’s afi output. 64-bit programs only.

What I learned

What working on rizin’s output taught you about static analysis, or about building tooling on top of someone else’s analysis engine.