Cyber Risks · PortSwigger Research

Passkey Raider

Summary: Passkey Raider is a Burp Suite extension, authored by Peeranat Thantaletong of Siam Thanat Hack and listed at version 1.0.2 with a last update of 28 July 2025, built to support comprehensive testing of Passkey systems. It has two components - a Settings Page for configuring URLs, regex patterns for extracting data, and generating key pairs, and a Passkey Message Editor for viewing and editing decoded Passkey data directly within HTTP requests.

Why it matters: A third-party tool that decodes and edits Passkey data inside live HTTP requests puts passkey implementations in reach of routine tester workflows, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users of Burp.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related