Andy Tyler
Senior Web Application Lead
Greater Exeter Area United Kingdom
Summary
🤩
RockstarAndy Tyler is a Senior Web Application Lead and seasoned pentester with nine years’ experience specializing in web and mobile vulnerability research, Active Directory security, and secure application development. He has published CVEs through the Android Security Rewards Program and contributed notable tooling to the community, including the jwt_tool for testing and cracking JSON Web Tokens. Comfortable both leading teams and getting hands-on, Andy balances consultancy work with ongoing research into JWTs, Android bug bounties, and cryptographic problems while automating workflows via Docker and scripting. Prior roles span SOC leadership to senior penetration testing across boutique and enterprise security firms, reflecting deep operational and adversary-informed defensive experience. Based in the Greater Exeter Area, he brings a pragmatic, research-driven approach to hard-to-find vulnerabilities and practical pentesting guidance.
9 years of coding experience
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (17)
python10
web-token10
command-line-interface10
base64-encoding10
jsonwebtoken10
jwt10
command-line10
cli10
algorithm9
algorithms9
implement9
decode8
it-security8
security8
base64url8
Programming languages (3)
Github contributions (5)
ticarpi/jwt_tool
Jan 2017 - Sep 2022
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
Role in this project:
Back-end Developer
Back-end DeveloperContributions:12 releases, 1 review, 65 commits in 5 years 8 months
Contributions summary:The user, ticarpi, primarily developed and maintained the JWT tool. Their contributions involved implementing core features for testing, tweaking, and cracking JSON Web Tokens. The user's commits showcase the development of a command-line tool, including the integration of multiple algorithms, and adding signing capabilities. They also worked on expanding the tool with functionality for exploiting vulnerabilities.
crackingjsonwebtokentesting
ticarpi/my-pentesting-repo
Jun 2017 - Mar 2020
This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.
Contributions:37 commits, 1 PR, 36 pushes in 2 years 9 months
pentesting
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.