WebAuthn CBOR is a Burp Extension to decode WebAuthn CBOR format.

WebAuthn is a W3C Standard to support strong authentication of users. WebAuthn depends on several other specifications such as Base64url encoding, Concise Binary Object Representation (CBOR), CBOR Object Signing and Encryption (COSE) to name a few.

Usage

• Intercept the WebAuthn request/response using Burp proxy
• If the request has a attestationObject parameter, a new Tab WebAuthn CBOR Decode will be added and the decoded CBOR format will be displayed.