srikanthramu / webauthn-cbor-burp

Burp Extension to Decode WebAuthn CBOR
Apache License 2.0
1 stars 2 forks source link

Add payload to test the server WebAuthn implementation #3

Open srikanthramu opened 2 years ago

srikanthramu commented 2 years ago

The credential response requires a lot of verification (https://www.w3.org/TR/webauthn-2/#sctn-registering-a-new-credential) at the Relying party that includes verifying the attestationObject. This extension should support ability to generate payload automatically to support verification. This depends on #2