USB Hacking - Revision history

AFries at 14:27, 22 November 2024

2024-11-22T14:27:24Z

← Older revision		Revision as of 14:27, 22 November 2024
Line 6:		Line 6:

	The O.MG Cable is a hacking tool made by the organisation "Hak.5". It has the ability to send DuckyScript Payloads to the connected device. These Payloads are sent over a WiFi Connection. Additionally, there is a feature that enables the Payloads to be executed, whenever the cable is plugged into a device. The O.MG Cable simulates keyboard and mouse inputs.		The O.MG Cable is a hacking tool made by the organisation "Hak.5". It has the ability to send DuckyScript Payloads to the connected device. These Payloads are sent over a WiFi Connection. Additionally, there is a feature that enables the Payloads to be executed, whenever the cable is plugged into a device. The O.MG Cable simulates keyboard and mouse inputs.
			The O.MG Cable Elite also has the function of keylogging.

	[[File:OMG_CABLE.jpg\|200px]]		[[File:OMG_CABLE.jpg\|200px]]
Line 86:		Line 87:
	== Demonstration ==		== Demonstration ==

			=== Payload ===
	To successfully deploy a payload. You need to write a DuckyScript or use the provided examples on the website. After writing a correct DuckyScript you can either save it in a slot to load it at another time, save it to "Boot" so it launches whenever it is connected to a device, or run it. "Run" sends the payload over the WiFi signal to the connected device, and executes it.		To successfully deploy a payload. You need to write a DuckyScript or use the provided examples on the website. After writing a correct DuckyScript you can either save it in a slot to load it at another time, save it to "Boot" so it launches whenever it is connected to a device, or run it. "Run" sends the payload over the WiFi signal to the connected device, and executes it.
	The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".		The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".

	[[File:Payloadexample.png\|650px]]		[[File:Payloadexample.png\|650px]]

			=== Keylogging ===
			To perform a keylogger attack, the O.MG Cable must be connected between the keyboard and the computer. Then, navigate to the KEYLOG section in the web interface and press Start. Optionally, enable LIVEVIEW to see the output in real-time. The keystrokes will now be recorded and displayed. It is important to note that the O.MG Cable only supports FULL-Speed USB.

			[[File:O.MG-Cable_keylogger.png\|650px]]

	== Scenario ==		== Scenario ==
Line 110:		Line 117:
	\|-		\|-
	\| Does not need to be flashed when the payload changes \|\| Needs to be flashed whenever the payload changes		\| Does not need to be flashed when the payload changes \|\| Needs to be flashed whenever the payload changes
			\|-
			\| Has the ability for keylogging whit the Elite version \|\|
	\|}		\|}

Line 124:		Line 133:
	* https://o-mg.github.io/WebFlasher/		* https://o-mg.github.io/WebFlasher/
	* https://shop.hak5.org/products/omg-cable		* https://shop.hak5.org/products/omg-cable
			* https://github.com/O-MG/O.MG-Firmware/wiki/Keylogger


	[[Category:Documentation]]		[[Category:Documentation]]

NFaustino: /* Quellen */

2023-02-01T15:39:02Z

Quellen

← Older revision		Revision as of 15:39, 1 February 2023
Line 119:		Line 119:

	* https://usbninja.com/help/		* https://usbninja.com/help/
			* https://hackerwarehouse.com/product/usb-ninja-cable/
	* http://192.168.4.1/omg.html.gz#		* http://192.168.4.1/omg.html.gz#
	* https://o.mg.lol/setup/		* https://o.mg.lol/setup/

NFaustino: /* Differences between the 2 cables */

2023-02-01T15:38:30Z

Differences between the 2 cables

← Older revision		Revision as of 15:38, 1 February 2023
Line 99:		Line 99:
	== Differences between the 2 cables ==		== Differences between the 2 cables ==

	~~[[File~~:~~DIfferences_Cables.png~~\|~~500px]]~~		{\| class="wikitable" style="margin:auto"
			\|-
			! <b>OMG Cable</b> !! <b>NinjaUSB</b>
			\|-
			\| DuckyScript Payloads \|\| Arduino IDE
			\|-
			\| Always simulates keyboard and mouse \|\| Simulates either keyboard or mouse
			\|-
			\| Payloads are sent over a WiFi connection or when connecting the cable \|\| Payloads are sent when connecting the cable, in a loop or with a remote
			\|-
			\| Does not need to be flashed when the payload changes \|\| Needs to be flashed whenever the payload changes
			\|}

	== Preventive measures ==		== Preventive measures ==

NFaustino: /* Quellen */

2023-01-31T21:07:59Z

Quellen

← Older revision		Revision as of 21:07, 31 January 2023
Line 108:		Line 108:

	* https://usbninja.com/help/		* https://usbninja.com/help/
			* http://192.168.4.1/omg.html.gz#
			* https://o.mg.lol/setup/
			* https://o-mg.github.io/WebFlasher/
			* https://shop.hak5.org/products/omg-cable


	[[Category:Documentation]]		[[Category:Documentation]]

NFaustino: /* Demonstration */

2023-01-31T21:07:01Z

Demonstration

← Older revision		Revision as of 21:07, 31 January 2023
Line 89:		Line 89:
	The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".		The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".

	Payloadexample.png		[[File:Payloadexample.png\|650px]]

	== Scenario ==		== Scenario ==

NFaustino: /* Demonstration */

2023-01-31T21:06:27Z

Demonstration

← Older revision		Revision as of 21:06, 31 January 2023
Line 88:		Line 88:
	To successfully deploy a payload. You need to write a DuckyScript or use the provided examples on the website. After writing a correct DuckyScript you can either save it in a slot to load it at another time, save it to "Boot" so it launches whenever it is connected to a device, or run it. "Run" sends the payload over the WiFi signal to the connected device, and executes it.		To successfully deploy a payload. You need to write a DuckyScript or use the provided examples on the website. After writing a correct DuckyScript you can either save it in a slot to load it at another time, save it to "Boot" so it launches whenever it is connected to a device, or run it. "Run" sends the payload over the WiFi signal to the connected device, and executes it.
	The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".		The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".

			Payloadexample.png

	== Scenario ==		== Scenario ==

NFaustino: /* Differences between the 2 cables */

2023-01-31T21:02:23Z

Differences between the 2 cables

← Older revision		Revision as of 21:02, 31 January 2023
Line 97:		Line 97:
	== Differences between the 2 cables ==		== Differences between the 2 cables ==

	[[File:DIfferences_Cables.png\|~~650px~~]]		[[File:DIfferences_Cables.png\|500px]]

	== Preventive measures ==		== Preventive measures ==

NFaustino: /* Differences between the 2 cables */

2023-01-31T21:02:09Z

Differences between the 2 cables

← Older revision		Revision as of 21:02, 31 January 2023
Line 97:		Line 97:
	== Differences between the 2 cables ==		== Differences between the 2 cables ==

	[[File:~~Differences_Cables~~.png\|650px]]		[[File:DIfferences_Cables.png\|650px]]

	== Preventive measures ==		== Preventive measures ==

NFaustino at 21:01, 31 January 2023

2023-01-31T21:01:40Z

← Older revision		Revision as of 21:01, 31 January 2023
Line 94:		Line 94:

	[[File:Threat_message.jpeg\|650px]]		[[File:Threat_message.jpeg\|650px]]

			== Differences between the 2 cables ==

			[[File:Differences_Cables.png\|650px]]

	== Preventive measures ==		== Preventive measures ==

NFaustino: /* Demonstration */

2023-01-31T19:43:27Z

Demonstration

← Older revision		Revision as of 19:43, 31 January 2023
Line 86:		Line 86:
	== Demonstration ==		== Demonstration ==

	~~Dein OMG Cable Angriff mit der Mail~~		To successfully deploy a payload. You need to write a DuckyScript or use the provided examples on the website. After writing a correct DuckyScript you can either save it in a slot to load it at another time, save it to "Boot" so it launches whenever it is connected to a device, or run it. "Run" sends the payload over the WiFi signal to the connected device, and executes it.
			The following picture is an example for a DuckyScript Payload that opens "Firefox" and types in "Youtube.com".

	== Scenario ==		== Scenario ==