This is a BurpSuite plugin that recognizes and scans Passkey (webauthn) protocols and detects security issues.

This extension contains scan checks for:

• Verifying the public key algorithms and elliptic curves
• User verification
• Strong authentication challenge
• "AllowCredentials" information disclosure
• User Handle Personally Identifiable Information

For further information on these vulnerabilities, please refer to the GitHub repository.