Jump to content

O.MG Cable vs. Demonseed EDU


Recommended Posts

Hi, 

Totally nuub here and I have been really interested in the O.MG cable for quite some time. I was wondering if any one could tell me what the exact benefits of having a O.MG cable over a Demonseed EDU would be? I mean clearly the description of the D3monseed says that it would take 100 seeds to match the power of a actual O.MG cable but i was just curious as to what that really meant. Just looking for more insight before I decide to buy anything. 

Also, i'm not a total piece of shit. I understand that a demonseed is a DIY mod that allows you to make any charger a payload injector. Just want to clarify in case I start getting trolled for my nub ass question. 

Link to post
Share on other sites

The question is what is your need and what are your constraints? O.MG is for field use. DemonSeedEDU is for learning. 

DemonSeedEDU is basically the bare minimum for a malicious cable by using very primitive techniques. Everyone who has assembled the kit has had an increased appreciation for O.MG.

O.MG looks identical to the target cable (better for Evil Maid/leave behind/etc), has 250x more storage space for payloads, 802.11 radio, onboard web server, payloads you can modify and trigger via wifi, boot payloads, location awareness, controllable via web UI/python/etc, self destruct, payload compiling happens on-the-fly, uses DuckyScript, etc  

 

  • Like 1
Link to post
Share on other sites
  • 2 months later...

_MG_,

Hell of a job you did here, I love how you broke down the hardware for the EDU.  I've been doing a lot of work on the ATTiny85 myself. I didn't get an opportunity to see the slack videos. However I get where you're going with the RF, given the correct wire length you could receive an appropriate signal on a given frequency to kick a script off.  That is a smart way to employ an RF field on a basic chip set.  Sounds like the O.MG is running a esp variant, 8266 or a 32?

Link to post
Share on other sites

thanks!
Yep, the resonance of the wire length is what is used for a very primitive RF trigger on DemonSeed EDU. The data passthrough technique will be using a trick that completely violates the USB spec as well 🙂The idea with the DemonSeedEDU kit is to stretch every little bit out of the little ATTiny that you can while adding as few external components as possible. It gets you thinking about how to leverage everything at your disposal when thinking about malicious implants. Hardware implants usually encounter all kinds of odd constraints that force you to think about making things work in ways that "you aren't supposed to". 

The O.MG Cables take that same line of thinking (stretch every bit you can out of the hardware) but using much more powerful hardware and component layouts that are extremely hard to work on by hand. The O.MG Keylogger Cable pushes things even more.  When I first started the O.MG project, I planned on it being a DIY thing... but the complexity of it quickly exploded the more we managed to stretch things. I can hand build a full DemonSeed in maybe 20min (soldering components to PCB, inserting it into a cable, etc). When I was fully hand building the original O.MG prototypes for Defcon 2019, it took me at least 4 hours per cable. So now we just keep pushing the limits on something that doesn't have to be DIY hardware. Though, I will say that getting these things "mass produced" has been a huge part of the challenge too. And yeah, the various O.MG Cables currently utilize espressif for radio comms, so you get full 802.11 that lets you push data back and forth. Heck, there is an entire web server inside the cable. The board was designed from the ground up. I used a PCB mill in my garage for the first few months of prototype revisions.
 

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...