Kevin Kessler · Infrastructure & Security
A glyph is meaning,
rendered.
Infrastructure, security, and automation I actually run in production. The code, the tools, and the write-ups are all here, free to use.
Security
certwatch
Grades a TLS endpoint from A to F in your terminal or CI: expiry, chain trust, protocol and cipher strength.
PythonTLSCI
Security
sshield
Audits sshd_config and authorized_keys for weak keys, weak crypto, and dangerous defaults.
C11SSH
Email
dmarc-digest
Turns DMARC aggregate XML into a readable digest: who sends as you, who is spoofing you, what to fix.
GoDMARC
Forensics
evtx-triage
Offline triage for Windows .evtx logs: brute-force bursts, cleared logs, rogue services, and suspicious PowerShell. Built for incident responders.
C#.NET 10DFIR
macOS
histscrub
Sweeps shell histories and stray credential files on macOS for leaked tokens, then redacts what it finds. No dependencies.
Swift 6macOS
02 / Browse
The rest of the site
2026.09.24 · PfSense
A pfBlockerNG IPv6 Crash That Also Breaks Your IPv4 Feeds
→
2026.09.24 · MacOS
CDC-ACM Serial Interface Bypasses TCC on macOS: A Disclosure After Apple Declined
→
2026.09.21 · VLAN
Home Network Segmentation: Isolating IoT and the Parts Everyone Skips
→
2026.07.23 · Ai-Security
An Autonomous AI Agent Hacked Hugging Face: Breaking Down the OpenAI Incident
→