4 ms·
You can actually do quite a lot with it, in terms of getting data and dropping various payloads: There is also an editor and parser for Duckyscript – the scrip
by at-fates-hands 5y ago
You can actually do quite a lot with it, in terms of getting data and dropping various payloads:
There is also an editor and parser for Duckyscript – the scripting language used by the Rubber Ducky offensive USB drive – which acts as a virtual keyboard and launches keystroke injection attacks. That alone opens up a wide array of custom payloads for the O.MG cable. There also appear to be attack payloads for Windows and Ubuntu systems.
In April 2019, when the video was released, MG and the team of hackers working on the embedded cable were also developing extra functions such as detecting user activity/inactivity. According to the Hak5 listing, they also appear to have cracked another key problem: USB enumeration.
https://nakedsecurity.sophos.com/2019/10/02/omg-evil-lightning-cable-hits-prime-time/ https://nakedsecurity.sophos.com/2019/10/02/omg-evil-lightni...