O.MG Cable

  • €199.00 €238.80
    Unit price per 

Complete wireless pentesting + payload platform invisibly embedded inside a cable. Originally a clandestine NSA tool costing over $20,000 - now available to everyone.

Introduction

All O.M.G products are the updated (2023) versions.

The O.MG Cable resembles an ordinary USB-cable with a highly covert secret. Invisibly concealed in the cable is a USB exploit framework allowing for HID-attacks remote via local or remote triggering of custom payloads.

While dormant, the O.MG cable functions as a regular USB Cable: Data Transfer, Recharging, etc. However, when triggered (via smartphone / computer / plugging in) - it executes its preprogrammed payload on the host device.

Emulating keyboard and mouse actions, payloads are completely customisable, and can be highly targeted.

Undetectable by firewalls, AV software or visual inspection, the O.MG is an ideal tool for penetration testers, police and government.

Functionality in a glance

Undetectable

Invisible to firewalls, anti-virus and visual inspection.

Highly targetable

Customise payloads to match specific environments.

Wireless triggering

Payload can be triggered wirelessly at any time.

Basic Vs Elite

The newly released elite O.MG cables have a more powerful chipset, allowing for even more advanced functionality: Injections are 8x faster, 25x more memory, covert data ex-filtration (even in air-gapped situations) and extended WiFi range.

Check out the full comparison below:

Cable Version Basic Elite
Keystroke Injection (DuckyScript™) ✔️ ✔️
Mouse Injection ✔️ ✔️
Payload Slots 8 50 - 200
Payload Speed 120 keys/sec 890 keys/sec
Self-Destruct ✔️ ✔️
Geo-Fencing ✔️ ✔️
WiFi Triggers ✔️ ✔️
Keyboard Logging ✔️
Covert Data Exfil ✔️
Air Gap Comms ✔️
Networked C2 ✔️
Extended Wifi Range ✔️
Stealth-Optimized Power Draw ✔️

What's Included

The O.MG Cable comes in multiple versions depending on your target systems:

  • USB-C (White Cable)
  • MicroUSB (Black Cable)
  • Lightning (White Cable)

Usage Instructions

The O.MG Cable has three distinct modes:

  1. Programming
    Because the device acts as a standard USB cable, it needs to be pushed into programming / DFU mode. This is done by using the "Programming Shield".

    The Programming Shield is connected to a host device, and the O.MG cable is plugged into the Shield.

    The O.MG Cable can now be programmed: Its WIFI settings can be configured, and payloads and trigger settings can be uploaded to the device.

    Programming is possible via a web-interface or smartphone app.

  2. Deployed
    The device is 'Deployed' when it is connected to the target machine.
    It will operate as a standard USB cable, allowing for data transfer and power transfer. It is able to stay in this state indefinitely until it is triggered.

  3. Triggered
    The device is triggered wirelessly via Wifi. It can be triggered by smartphone, or by dedicated remote control.

      Technical Specifications

      • Cable Physical Characteristics
        • Length: 1 m
        • Color: white for USB-C and Lightning, Black for Micro-USB
        • Connector options: Micro-USB, USB Type-C, Lightning
        • Voltage range: 5v (supports fast charging)
        • Current consumption: 10 mA (typical)
        • Data Speed: USB 2.0
      • Wireless Specifications
        • Wifi, 802.11b/g/n (2.4GHz)
      • Mobile App
        • Alternative to remote control for triggering payload
        • Open source and freely available
      • Programming
        • Payload Script: DuckyScript compatible with additional features.
        • Smartphone interface
        • In-Browser interface

      Technical Resources:

      SHIPPING & PACKAGING INFORMATION

      Lab401's engagement is to get your orders to you as quickly as possible in a perfect condition. All packages are insured to 100% of the value, and Lab401 Delivery Protection can be used to ensure immediate re-shipment if a package is lost or damaged.

      All orders are securely packaged. Premium and Express orders are further protected in an untearable polyurethane satchel, ensuring that your package is not tampered with during delivery.

      To ensure privacy and reduce theft, all packages are anonymous - there is no mention of product contents or Lab401 branding on the outside of the packaging.

      Shipping Options

      Lab401 provides three types of shipping options:

      • Eco Delivery
      • Premium Delivery
      • Urgent Express Delivery

      Eco Delivery is for available light and slim orders, particulaly cards, keyfobs and accessories. It is dispatched by La Poste (French postal system) and tracked.

      Premium Delivery is our default shipping option: fast and reliable delivery via courier. Depending on the destination, Premium Delivery use UPS, DHL, FedEx, Chronopost or Colissimo.

      Urgent Express Delivery uses the fastest possible delivery method possible: UPS Express, FedEx Express, DHL Express or Chronopost Express.

      Lab401 provides same day shipping for Urgent Express orders made before 12PM GST+1.

      Do you provide free shipping?

      Yes - orders over 650€ excluding taxes have free shipping.

      Customers that qualify for free shipping can still select rapid shipping options.

      When will I receive my order?

      Average order times can be estimated below.

      Average shipping estimates can be seen by selecting the destination country / region below.

      While actual shipping times may vary - these estimations are built off our real delivery statistics. To receive an order as quickly as possible, we recommend:

      • Use the Urgent Express shipping method
      • Use same day shipment by placing the order before 12PM GMT+1

      Do you ship internationally?

      We ship world-wide, but due to logistical or legal restrictions, we are unable to ship to the following countries: Martinique, St. Martin, Guadeloupe, Mayotte, Réunion, St. Barthélemy, St. Pierre & Miquelon, Moldova, Argentina, Belarus, Bolivia, Brazil, Cambodia, Chile, Ecuador, Georgia, India, Iraq, Kazakhstan, Kuwait, Liberia, Libya, Nepal, Oman, Panama, Peru, Russia, South Africa (Exception: Gauteng), Turkey, Ukraine, Vietnam, Egypt, Pakistan, Serbia, Spain (Balears, Ceuta,Las Palmas, Santa Cruz de Tenerif), Faroe Islands, Gibraltar, French Guiana, French Polynesia, French Southern Territories, Saudi Arabia.

      Where do you ship from?

      All items are dispatched from France. You will receive a tracking number upon item dispatch. The address used on your purchase is printed as a label - please double check your address to avoid mistakes.

      When will my order be dispatched?

      Lab401 dispatches orders Monday - Friday.
      All orders placed before 12PM GMT+1 will be dispatched the same day. All orders placed after this cutoff time will be dispatched the next business day.

      For example:

      • An order placed Friday, 9AM GMT+1 will be dispatched the same day.
      • An order placed on Friday, 6PM GMT+1 will be dispatched Monday.
      • An order placed on Saturday will be dispatched Monday

      For any questions, please contact customer support.

      How are import duties / customs handled?

      For all European Union destinations, all shipments are DDP - Delivered Duty Paid. This means all applicable VAT/TVA, shipping costs and customs fees are pre-paid.
      You will not be charged by the courier service / post office or customs.

      For all destinations outside European Union, all shipments are DDU - Delivered Duty Unpaid. This means that your country's custom service impose a VAT/TVA/Import Duty on your shipment.

      I am charged VAT ?

      Lab401 (ETOILE 401 SAS) is an EU-Registered entity. VAT is applicable to purchases delivered within the EU, with exceptions for VAT Registered entities. VAT is calculated at checkout. For your convenience, you can browse Lab401 with prices Including VAT and Excluding VAT.

      Sales are contractual

      Please note - a purchase is an explicit agreement of our terms and conditions. Any products refused by clients will not be refunded.

      Purchase Security Validation may be applied

      To protect against credit card fraud, orders may be flagged for Purchase Security Validation. In this instance, we will reach out to the customer to perform a manual verification process.

      Orders that are flagged for Purchase Security Validation are considered to be incomplete until validated. Our delivery deadline obligations begin only when an order is validated.

      Delivery Protection

      Is my delivery protected?

      All Lab401 shipments are insured with the carrier.

      We also provide an advanced insurance, Lab401 Delivery Protection.

      Lab401 Delivery Protection means we remain fully responsible for the package right up to delivery. If the package is lost or damaged, the package can be resent immediately (48 business hours) upon receipt of proof.

      For orders without Delivery Protection, lost or damaged packages will pass through the carrier's protocols, which can take well over 30 days.

      For orders that are time-sensitive, we recommend Lab401 Delivery Protection.

      Delivery Protection can be purchased at checkout easily and cheaply.