Breaking WebAuthn, FIDO2, and Forging Passkeys

www.nullpt.rs

Breaking WebAuthn, FIDO2, and Forging Passkeys

www.nullpt.rs

Resident Pulser@infosec.pubB to

Pulse of Truth@infosec.pubEnglish · 13 days ago

Forging Passkeys: Exploring the FIDO2 / WebAuthn Attack Surface

www.nullpt.rs

Passwords are dying and passkeys are taking over. In this post we tear apart WebAuthn and build our own software FIDO2 authenticator from scratch.

Comments

You must log in or register to comment.

Chat

Pulse of Truth@infosec.pub

pulse_of_truth@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !pulse_of_truth@infosec.pub

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

32 users / day
208 users / week
851 users / month
3.2K users / 6 months
1 local subscriber
1.27K subscribers
1.6K Posts
1.1K Comments
Modlog

mods:
krogoth@infosec.pub