Kevin Kessler · Infrastructure & Security
A glyph is meaning,
rendered.
Infrastructure, security, and automation I actually run in production. The code, the tools, and the write-ups are all here, free to use.
Featured in Hackaday: my macOS USB security research.
certwatch
Grades a TLS endpoint from A to F in your terminal or CI: expiry, chain trust, protocol and cipher strength.
sshield
Audits sshd_config and authorized_keys for weak keys, weak crypto, and dangerous defaults.
dmarc-digest
Turns DMARC aggregate XML into a readable digest: who sends as you, who is spoofing you, what to fix.
evtx-triage
Offline triage for Windows .evtx logs: brute-force bursts, cleared logs, rogue services, and suspicious PowerShell. Built for incident responders.
histscrub
Sweeps shell histories and stray credential files on macOS for leaked tokens, then redacts what it finds. No dependencies.
The rest of the site
2026.09.24 · PfSense
A pfBlockerNG IPv6 Crash That Also Breaks Your IPv4 Feeds
→
2026.09.24 · MacOS
macOS Has No TCC Category for USB Serial Access: A Disclosure After Apple Declined
→
2026.09.21 · VLAN
Home Network Segmentation: Isolating IoT and the Parts Everyone Skips
→
2026.07.23 · Ai-Security
An Autonomous AI Agent Hacked Hugging Face: Breaking Down the OpenAI Incident
→