INTRODUCTION Over the years, the capabilities of O.MG cables has evolved rapidly, becoming more and more advanced. Scripting, payloads, keystroke injection, wireless administration, stealth modes, self-destruct, geo-fencing, remote triggers and so much more - have turned these cables into a deeply comprehensive physical payload platform. After much demand, the power of O.MG cables is available in other form-factors! Data blockers, or "USB Condoms" are often used to ensure your are airgapped when plugged into an untrusted USB socket. The O.MG "UnBlocker" is a deviant twist: it's embedded in a USB "Data Blocker" adaptor. In this form factor - it's guaranteed to never arouse suspicion. During during red-team events, it can be given to targets masquerading as prophylaxis against attacks - while in actual fact, it's actually the attack vector. When dormant - it acts as a data blocker. When activated, payloads are delivered on the male side of the device. Important: The O.MG Plug is shipped in deactivated mode - it requires flashing before use. We recommend using the O.MG Programmer - which is compatible with all O.MG devices and cables. Flashing is performed easily via any web-browser. FEATURES WebUI over WiFi: Control everything remotely with a web browser. Desktop or mobile. Keystroke Injection: Instant DuckyScript payloads. No recompiling or reprogramming, just click run! And with industry-leading 890keys/sec speeds. Lots of Payload slots: Storage allows up to 300 slots! Global Keymaps: With 192 keymaps already built in, you can target machines across the world. Built in IDE: The WebUI not only provides 100% of the controls, but also gives you helpful feedback to catch syntax errors while rapidly building payloads. Stealth: Spoof any USB identifier (VID/PID), extended USB Identifier, and network MAC address. Port Stealthing (Elite Models) lets the Plug stay dormant until a payload is deployed. No logs. No detections. HIDX StealthLink: Elite model: setup a bidirectional tunnel from Target Host > O.MG > Control Machine. Encrypted Network C2: Elite models: Use an encrypted connection to access & control your O.MG from anywhere. Then disable the onboard WebUI to hide and protect your O.MG on untrusted networks. Compatible with any server that runs python. Self-Destruct: Elite model: Make your legal team happy by ensuring sensitive payloads & loot are gone, and the O.MG Plug is fully inert. (recoverable with O.MG Programmer) Geo-Fencing: Trigger payloads or other actions based on location. Keep your tool from falling out of scope! Ex: self-destruct if someone takes the O.MG Plug out of scope. WiFi Triggers: Trigger payloads at long range with a single beacon. ELITE Feature Tier Feature Elite Keystroke Injection DuckyScript 3 Mouse Injection ✔ Payload Slots 50-300 Max Payload Size 1,500,000 keystrokes Max Payload Speed 890 keys/sec Geo-Fencing ✔ WiFi Triggers ✔ Port Stealthing ✔ Self-Destruct ✔ HIDX StealthLink ✔ Encrypted Network C2 ✔ All specs are based on devices using the latest Beta firmware Usage Instructions The O.MG Plug has three distinct modes: ProgrammingBecause the device acts as a standard USB device, it needs to be pushed into programming / DFU mode. This is done by using the "Programming Shield".The Programming Shield is connected to a host device, and the O.MG Plug is plugged into the Shield. The O.MG Plug can now be programmed: Its WIFI settings can be configured, and payloads and trigger settings can be uploaded to the device.Programming is possible via a web-interface or smartphone app. DeployedThe device is 'Deployed' when it is connected to the target machine. It can be configured to have any USB identifier (VID/PID) or network MAC address. In this mode, the device is dormant until triggered. TriggeredThe device is triggered wirelessly via Wifi. It can be triggered by smartphone, or by dedicated remote control. Technical Specifications Physical Characteristics Color: Red, Black or White Connector: USB-A Wireless Specifications Wifi, 802.11b/g/n (2.4GHz) Mobile App Alternative to remote control for triggering payload Open source and freely available Programming Payload Script: DuckyScript compatible with additional features. Smartphone interface In-Browser interface Technical Resources: O.MG Official Wiki O.MG Official GitHub O.MG Official Discord
