O.MG Plug

Description

The O.MG Plug is a compact USB device for deploying DuckyScript™ payloads during authorised security assessments, controlled research and security training. It is operated through a browser-based interface and is available in Basic and Elite feature tiers, with black and white Elite options.

Key features

• Browser-based control through a modified O.MG implant interface.
• Supports DuckyScript™ payload deployment.
• Payloads can be prepared and transferred through the web interface.
• Onboard storage supports saving and loading payloads.
• Payload execution can be configured for automatic launch.
• Basic model supports payload deployment from a compact keychain form factor.
• Elite models add increased storage, up to 200 payload slots, port stealthing, self-destruct, covert exfiltration and communications, and networked command and control features, according to the manufacturer.

Technical details

• Compact keychain-style form factor.
• After setup, the device creates a wireless network for browser access.
• The manufacturer documents browser access through the device’s local web interface.

Compatibility and setup

The O.MG Plug is activated and configured with the manufacturer’s WebFlasher using a compatible WebSerial-capable browser. The manufacturer also documents an alternative Python flasher and states that the same firmware tools used for the O.MG Cable can be used with the Plug. The device is supplied deactivated and requires an O.MG Programmer for activation, firmware updates and recovery. Use it only with explicit permission and within an agreed test scope.

Buying in the UK and EU

RedKit Labs lists the O.MG Plug in GBP, EUR and USD, with VAT handled at checkout. UK and EU buyers should review applicable rules for USB keystroke-injection devices, authorised access testing and any export or import controls before purchase and use.