// Study Tools · Hans Study
Study Tools
Utilities I needed on a job and decided were worth building properly. A security policy builder, switch configs, subnetting, Windows hardening scripts, crypto config, cable BOMs, a Genetec health check, a firewall path checker, and a Cisco config audit skill. The browser tools need no signup, and your configuration text and answers stay in the page; the site records that a generation happened and the options chosen. Two open-source scripts live on GitHub, and their pages here explain what they do and how to run them.
Compliance
Network
Base switch configuration generator
Base configuration templates for Cisco Catalyst 9200/9300, Aruba CX 6200/6300, and ALE OmniSwitch 6360/6560. Builds a starting point from your VLAN scheme, management addressing, and uplink topology. Saves the first 30 to 60 minutes of every new switch deployment.
Subnet calculator
IPv4 CIDR inspection and FLSM subnetting. Paste a CIDR like 10.42.67.0/24 for network, broadcast, mask, wildcard, host range, and binary. Switch to subnet mode to split a parent network into equal-size children by prefix or host count. Runs in the browser, no signups.
Windows Hardening
Study Windows Configuration Utility
Wizard-driven PowerShell generator for Windows workstation and server hardening. Local PC mode produces a per-machine .ps1; Domain Joined mode produces a GPO creation script. Pick a baseline (DISA STIG, CIS L1, NSA/CISA, CCCS, or CMMC L2 / CPCSC), toggle 37 individually-sourced controls plus 27 debloat targets, and download a SHA-256 fingerprinted output. Every control sourced from a published standard.
Study CryptoConfig
A purpose-built Windows SCHANNEL configuration utility. Toggle SSL 2.0 through TLS 1.3 by Client and Server role, order cipher suites, apply one of six built-in templates (NIST SP 800-52 Rev 2, CIS Benchmark L1 / L2, Genetec SC 5.11+, PCI DSS 4.0, FIPS 140-2, Windows Default), and export a PowerShell script or .reg file. Portable Windows EXE, no installer.
Open-source scripts
PortProof
A PowerShell script that proves a declared list of firewall paths is open before a cutover or a vendor commissioning. Probes each source, target, and port once, returns a pass/fail matrix, writes HTML, CSV, and JSON reports, and exits non-zero when a required path fails. Apache-2.0.
Cisco switch config audit skill
A Claude skill that audits Cisco IOS and IOS-XE switch running-configs offline against 121 checks. Credentials are masked, and each finding carries a paste-ready fix cited to DISA STIG, NSA, CISA, or Cisco guidance. Also generates hardened baselines. Apache-2.0.
Physical security
Conductor calculator
Door hardware to cable BOM. Pick the door type, lock, reader, REX, DPS, supervision, and auxiliary devices, and the tool builds the cable list with Belden part numbers, EOL resistor counts, and callouts for the gotchas. Plenum and riser cables resolve automatically. Multi-door projects roll up into a project totals view with TXT export.
Genetec health audit
A field-grade health check for a Genetec Security Center deployment. Ten sections covering architecture, storage, network, monitoring, security, cameras, integrations, backups, and ownership. About fifteen minutes for a system you know. Generates a severity-ranked PDF report. Runs in the browser; your answers and field notes stay in the page.
Genetec health check checklist
The interactive companion to the full Health Audit. Ten sections, 86 items, pass / needs-review / not-started states per item, notes per item, and Print or Save as PDF for a clean leave-behind. Progress is stored in your browser only.