A tool to test & analyze FIDO2/WebAuthn requests and responses
- WebDevAuthn Web Tool: http://localhost:8080/WebDevAuthn
- Chrome Extension: https://chrome.google.com/webstore/detail/webdevauthn/aofdjdfdpmfeohecddhgdjfnigggddpd
- Firefox Extension: https://addons.mozilla.org/firefox/addon/webdevauthn/
WebDevAuthn is a web tool to test & analyze FIDO2/WebAuthn requests and responses. The web application can work as a playground, letting developers experiment and understannd with the WebAuthn internals, while also allowing the testing and experimentation of FIDO2 authenticator devices.
Furthermore, developers may use this tool's injector (in the form of embedded code or an extension) to hijack WebAuthn calls and analyse them. The tool also features an advance virtual authenticator, able to emulate WebAuthn responces.
Analyser Features:
- Capture WebAuthn requests
- Analyse WebAuthn options (show info, warnings & errors)
- Unpack/Decode WebAuthn authenticator responses
- Virtual Authenticator Device (for custom responses)
Virtual Authenticator Device:
- OS independent
- Supports packed attestation
- Supports wrapped keys to credentials id
- Access to the private key of the generated credentials
- Testing mode to assess implementations
- Multiple supported algorithms
Contact me to leave me your feedback or to express your thoughts.
You can open an issue or send me a mail
This web application was developed as part of my thesis for the postgraduate programme "Digital Systems Security"
University of Piraeus, Department of Digital Systems, Digital Systems Security
Copyright (c) 2023 Grammatopoulos Athanasios-Vasileios
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent