Make Duo think you have a Mac for WebAuthn on adfs.leeds.ac.uk domains
What is Leeds Duo Pwn?
Leeds Duo Pwn is a Chrome extension that enables WebAuthn on non-MacOS devices for Duo 2FA on University of Leeds SSO. It spoofs the user-agent specifically for adfs.leeds.ac.uk domains, allowing users to bypass the restriction. By following the provided instructions for Windows Hello Duo 2FA, users can easily authenticate themselves and gain access. The source code is available on GitHub.
Extension stats
By: rakagunarto
Rating: 5.00
(3)
Creation date: 2021-09-29
Risk impact: Moderate risk impact
Risk likelihood: Low risk likelihood
Manifest version: 2
Permissions:
Size: 11.43K
Email: ra*****@gmail.com
Other platforms
Not available on Firefox
Not available on Edge
Want to check extension ranking and stats more quickly for other Chrome extensions?
Install
Chrome-Stats extension
to view Chrome-Stats data as you browse the Chrome Web Store.
Extension summary
This extension simply enables WebAuthn for non MacOS machines on University of Leeds SSO Duo 2FA. Simply put, it's a user-agent spoofer that only changes your UA on specific domains.
Windows Hello Duo 2FA Instructions:
- Go to "Sign-in options" in Windows, if you don't have a fingerprint scanner or a Windows Hello camera capable of facial recognition, be sure to enable Windows Hello PIN
- Next time when logging in to duo, click the menu on the top right instead, and choose "Add a New Device".
- Select "Touch ID"
- You should now be greeted with a Windows Hello prompt to authenticate yourself
- Pwned
User reviews
Legend
Does exactly as stated, very good
Works perfectly mate, ty!
Extension safety
Risk impact
Leeds Duo Pwn requires a few sensitive permissions. Exercise caution before installing.
Risk likelihood
Leeds Duo Pwn has earned a fairly good reputation and likely can be trusted.
Upgrade to see risk analysis details
Similar extensions
Here are some Chrome extensions that are similar to Leeds Duo Pwn:
OpenLM Browser Agent openSUSE User Agent Rotation UserAgent User Agent Parser cyberTWEAK ChromeEX User-Agent Converter Agent Switcher for WIT Bye DUO User Agent Spoof Cydog Toolkit IE8 User-Agent
OpenLM
N/A
83
Unknown
5.00
294
developer.waieight.
N/A
37
https://gokatz.me
1.00
47
thirstylions
4.00
15
https://powerz.top
N/A
18
https://www.downloadhub.cloud
N/A
385
steph.ruppel
N/A
24
eliu0615
5.00
332
Unknown
1.00
124
mdbench
N/A
7
Nikolai Kim
5.00
2,000+