Breaking WebAuthn, FIDO2, and Forging Passkeys

www.nullpt.rs

Breaking WebAuthn, FIDO2, and Forging Passkeys

www.nullpt.rs

Resident Pulser@infosec.pubB to

Pulse of Truth@infosec.pubEnglish · 17 days ago

Forging Passkeys: Exploring the FIDO2 / WebAuthn Attack Surface

www.nullpt.rs

Passwords are dying and passkeys are taking over. In this post we tear apart WebAuthn and build our own software FIDO2 authenticator from scratch.

Comments

You must log in or # to comment.

Chat

Pulse of Truth@infosec.pub

pulse_of_truth@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !pulse_of_truth@infosec.pub

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

19 users / day
214 users / week
882 users / month
3.2K users / 6 months
1 local subscriber
1.3K subscribers
1.62K Posts
1.11K Comments
Modlog

mods:
krogoth@infosec.pub