| O.MG Cable Tier | Basic (Gen 1) | Elite (Gen 3) | ||||
|---|---|---|---|---|---|---|
| Keystroke Injection | DuckyScript™ 2 | DuckyScript™ 3 | ||||
| Mouse Injection | ✔ | ✔ | ||||
| Payload Slots | 8 | 50-300 | ||||
| Max Payload Size | 4,000 keystrokes | 1,500,000 keystrokes | ||||
| Max Payload Speed | 120 keys/sec | 890 keys/sec | ||||
| Self-Destruct | ✔ | ✔ | ||||
| Geo-Fencing | ✔ | ✔ | ||||
| WiFi Triggers | ✔ | ✔ | ||||
| FullSpeed USB Hardware Keylogger | ✔ | |||||
| HIDX StealthLink | ✔ | |||||
| Encrypted Network C2 | ✔ | |||||
| Extended WiFi range | ✔ | |||||
| Stealth-Optimized Power Draw | ✔ | |||||
|
|
||||||
Support
O.MG Cable
-
Ships in 1-3 day worldwide
Orders are fulfilled from our California warehouse in 1-3 days. Typical shipping times:
- 🇺🇸 USA: 2-7 days
- 🇨🇦 Canada: 2-8 days
- 🇬🇧 UK: 3-5 days
- 🇪🇺 EU: 3-8 days
- 🦘 Australia: 3-10 days
Insured against loss & damage
Orders under $2500 are automatically protected against loss & damage via MonkProtect™ shipping insurance with a fast and easy resolution center.
EU Safety Information
Manufacturer: Hak5 LLC. 5473 Blair Rd, Ste 100 PMB 39371, Dallas, TX 75231. Shop@Hak5.org. https://shop.hak5.org
Responsible Person: Easy Access System Europe - Mustamäe tee 50, 10621 Tallinn, Estonia, gpsr.requests@easproject.com
Safety Information: Warning: Not suitable for children under 14 years. This is not a toy. Contains small parts that may present a choking hazard. Keep out of reach of children. Do not expose the device to water, excessive moisture, direct sunlight or extreme conditions (moisture, heat, cold, dust), as the device may malfunction or cease to work when exposed to such elements. Do not attempt to disassemble or repair the device yourself. Doing so voids the limited warranty and could harm you or the device. This device is not designed, manufactured or intended for use in hazardous environments requiring fail-safe performance in which the failure of the device could lead directly to death, personal injury, or severe physical or environmental damage. Wireless equipped devices are restricted to indoor use only when operating in the 2400 MHz – 2483.5 MHz frequency range within the EU and EFTA countries, as required by Article 10(10) of Directive 2014/53/EU. Battery equipped devices: do not dispose of batteries in household waste. Battery replacement must be carried out by a qualified technician. This USB-powered device complies with the EMC Directive (2014/30/EU) and meets the requirements of EN 55032 and EN 55035 for electromagnetic compatibility. This device is designed in accordance with USB-IF specifications for voltage limits, data integrity, and power safety to ensure reliable and compliant operation. This product has been designed and manufactured in accordance with the RoHS requirements and complies with the European Union’s Restriction of Hazardous Substances (RoHS) Directive 2011/65/EU and Directive (EU) 2015/863. This device is designed to operate reliably within an operating temperature range of 35ºC to 45ºC and a storage temperature range of -20ºC to 50ºC. It is rated for use in environments with 0% to 90% relative humidity (non-condensing). Proper environmental conditions must be maintained to ensure optimal performance and longevity. Made in China. This device is for authorized auditing and security analysis purposes only where permitted subject to local and international laws where applicable. Users are solely responsible for compliance with all laws of their locality. Hak5 LLC and affiliates claim no responsibility for unauthorized or unlawful use. This device is packaged with a limited warranty, the acceptance of which is a condition of sale. See Hak5.org for additional warranty details and limitations. Availability and performance of certain features, services and applications are device and network dependent and may not be available in all areas; additional terms, conditions and/or charges may apply. All features, functionality and other product specifications are subject to change without notice or obligation. Hak5 LLC reserves the right to make changes to the products description without notice. Hak5 LLC does not assume any liability that may occur due to the use or application of the product(s) described herein.
The O.MG Cable is a hand made USB cable with an advanced implant hidden inside. It is designed to allow your Red Team to emulate attack scenarios of sophisticated adversaries. Until now, a cable like this would cost $20,000 (ex: NSA's COTTONMOUTH-I). These cables will allow you to test new detection opportunities for your defense teams. They are also extremely impactful tools for teaching and training.
The uncompromising attention to the physical size of the cable isn't where we stopped. Thanks to continual firmware updates, the resulting power, flexibility, and ease of use have made the O.MG Cable a favorite for both new students and seasoned pros.
NOTE: All cables are 1 meter in length. Custom 2 meter versions can be found here.
O.MG Programmer USB A+C
$25.00
Required for Setup
Compare O.MG Cable Tiers:
2: Choose an active end:
USB-A: payloads deliver from the USB-A connector. Available with C, Micro, or Lightning passive ends.USB-C: payloads deliver from the USB-C connector. Available with Micro or Lightning passive ends.Directional C to C: This cable changes behavior depending on what direction you connect it, unlike a normal C to C cable. Connect the active end to a USB host, it behaves like a normal USB 2.0 cable & transmits payloads out the active end. Or connect just the active end to a mobile device for mobile payload delivery. On TPE variants, the active end is marked with a discreet logo. For Woven variants, the active end is identified by a removable tag, but is otherwise unmarked. If required, you can add your own markings. If you forget which end is active, an O.MG Programmer's "OMG" light can be used.
3: Choose the passthrough end & color:
This is the camouflage that lets your O.MG Cable blend in with whatever environment you are working with. Just pick the connector and color. All cables behave as a normal USB 2.0 cable when the implant is dormant: 480mbps data transfer & 5v charging (supplied to the passthrough end) when the active end is connected to a USB Host.
4: Add an O.MG Programmer:
Due to the advanced capabilities of the O.MG Cable, regulations require that they are shipped "deactivated". An O.MG Programmer lets you activate them using an easy 3 step desktop web-browser utility. This will also allow you to upgrade to the latest firmware, and recover if you lock yourself out. The O.MG Programmer is universal for all O.MG Devices, so you only need one for all your O.MG Cables, O.MG Adapters, O.MG UnBlockers, and O.MG Plugs. WebFlasher is compatible with any WebSerial capable browser. Or use alternate python flasher.
O.MG Cable Features
-
Easy WiFi Control
Full control with your web browser. Desktop or mobile. -
Keystroke Injection
Instant DuckyScript payloads. No recompiling or reprogramming, just click run! And with industry-leading 890keys/sec speeds. -
Lots of Payload slots
Basic model comes with 8 slots. Elite has extra storage allowing up to 300 slots! -
Global Keymaps
With 192 keymaps already built in, you can target machines across the world. -
Built in IDE
The WebUI not only provides 100% of the controls, but also gives you helpful feedback to catch syntax errors while rapidly building payloads. -
Mobile Payloads
Cables with a USB-C active end, or Directional C to C, can automatically transmit to mobile devices with a USB-C connector. Connect just the active end! -
Stealth
The implant stays dormant until a payload is deployed. No logs. No detections. The cable behaves just like a normal USB 2.0 cable. (5v charging, 480mps data transfer) Spoof any USB identifer (VID/PID), extended USB Identifier, and network MAC address.
-
Hardware Keylogger
Elite models contain a passive hardware keylogger designed for FullSpeed USB keyboards with detachable cables. Store up to 650,000 keystrokes. For tested keyboards & more info go here. -
HIDX StealthLink
Elite models: setup a bidirectional tunnel from Target Host > O.MG > Control Machine. -
Encrypted Network C2
Elite models: Use an encrypted connection to access & control your O.MG from anywhere. Then disable the onboard WebUI to hide and protect your O.MG on untrusted networks. Compatible with any server that runs python. -
Self-Destruct
Make your legal team happy by ensuring sensitive payloads & loot are gone, and the O.MG Cable is fully inert. (recoverable with O.MG Programmer) -
Geo-Fencing
Trigger payloads or other actions based on location. Keep your tool from falling out of scope! Ex: self-destruct if someone takes the O.MG Cable home. -
WiFi Triggers
Trigger payloads at long range with a single beacon.
Easy Wifi controls
Control everything remotely with a web browser. 1 click payload deploy. Built in IDE helps guide you.
Implant Inside
This advanced implant has more features and flexibility than tools 100x the size.
x