Skip to content
View PentestPlaybook's full-sized avatar
32 followers · 4 following

Achievements

Achievement: Starstruck

Achievements

Achievement: Starstruck

Block or report PentestPlaybook

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
PentestPlaybook/README.md

Hi, I'm Andrew Lobenstein 👋

Engineer working across software/cloud and security. The throughline in everything I build is the same: complete, resilient systems that handle the messy edge cases and fail loudly instead of silently — whether that's a multi-account AWS pipeline or a credential-relay framework.

Software & cloud engineering

  • Architect and run production AWS integrations across eight accounts (Lambda, Step Functions, EventBridge), wired into Zendesk for support operations
  • Build self-contained Python tooling: OAuth-authenticated data exporters, multi-account config auditors, SLA-reminder pipelines with per-stage retry and exponential backoff
  • Design operational alerting that fires on the absence of expected activity, not just on errors

Security 3+ years in offensive security, applied the same way I build everything — robust, end-to-end, edge-cases-handled. Certs: OSWP · CySA+ · AWS Cloud Practitioner. Currently working toward the OSCP+.

Selected public projects

  • 📡 pager-payloads — real-time, MFA-aware credential-relay framework (Python/Selenium + a Kotlin Android orchestrator) on a from-scratch OpenWrt captive-portal stack
  • 🔐 passwordless-credential-audit — a verify-then-trust pipeline for Windows: establish trust in a flagged tool, audit its posture, monitor it for tampering, and alert out-of-band
  • 🏗️ ad-lab-scripts — checkpoint-resumable, idempotent scripts that build a full vulnerable Active Directory lab for hands-on practice

Stack: Python · PowerShell · Bash · AWS · SQL — and currently picking up TypeScript / React / Fastify

Security projects are for authorized testing and education only.

Pinned Loading

  1. ad-lab-scripts ad-lab-scripts Public

    Modular, checkpoint-resumable scripts that build a vulnerable Active Directory lab (ad.lab forest) for authorized pentesting practice. One PowerShell script per VM, idempotent across reboots. Autho…

    PowerShell 91 16

  2. pager-payloads pager-payloads Public

    Real-time, MFA-aware credential relay framework for the WiFi Pineapple Pager: a config-driven Python/Selenium engine that replays captured logins and auto-handles the OTP step, with a Kotlin Androi…

    Shell 38 1

  3. web-attacks web-attacks Public

    A reproducible DVWA web-security lab with one-command vulnerable↔patched toggling (and self-cleanup), plus worked walkthroughs for SQLi, XSS, CSRF, LFI/RFI, and more. Authorized testing only.

    Shell

  4. wpa2-pentest-toolkit wpa2-pentest-toolkit Public

    Automated WPA2 PSK auditing in Bash: build a WPA2 AP to test against, then run discovery → handshake capture → deauth → crack, with signal-safe cleanup and resumable captures. Authorized use only.

    Shell 3

  5. pentest-cheatsheets pentest-cheatsheets Public

    Lateral-movement playbooks (five tunneling transports) plus an automated two-machine credential-dump pipeline with a config-handoff pattern. Authorized testing only.

    PowerShell 2

  6. passwordless-credential-audit passwordless-credential-audit Public

    A verify-then-trust security pipeline for Windows: safely establish trust in a flagged tool, audit its protection posture, monitor it for tampering, and alert out-of-band via a SOAR listener. Power…

    PowerShell