pass-the-passkey

The Pass-the-Passkey repository offers a suite of tools designed to exploit and assess the vulnerabilities of WebAuthn and FIDO2 authentication methods in Windows. Key features include the Passkey Injector for intercepting and modifying authentication assertions, SharpPasskeys for executing payloads to retrieve user credentials, and the WebAuthn Hook for tampering with the assertion workflow through API interception. This toolkit is invaluable for security researchers and penetration testers aiming to understand and enhance the security of passkey-based authentication systems.