3 ms·
Which can be used to register your own passkey credentials obtaining an account takeover?
by vlovich123 2y ago
Which can be used to register your own passkey credentials obtaining an account takeover?
- _23sd 2y agoSure, if you assume the session is scoped to allow registering a new passkey. Depends on how the application is configured. Regardless, getting the credential is different from getting a session.