finds.dev← search

// the find

UberGuidoZ/OMG-Payloads

★ 259 · GPL-3.0 · updated Feb 2023

Payloads for the O.MG cables and accessories. Might work for Rubber Ducky too!

A small payload collection for O.MG cables — hardware HID attack devices that look like USB cables. Mostly pranks (rickrolls, Matrix screensaver) with one payload that disables Windows Defender and another that dumps saved WiFi passwords.

The WiFi password exfiltration payload is a clean, practical demo of what HID attacks can actually accomplish in seconds. Each payload ships with its own ReadMe explaining what it does and any prerequisites, which is more than most payload repos bother with. The Rubber Ducky compatibility note is useful since DuckyScript syntax overlaps significantly.

Three years without a commit and only eight payloads — this is a snapshot, not a maintained library. The 'Defeat_Defender' payload almost certainly doesn't work against modern Windows Defender without significant adaptation; AV evasion techniques from 2023 have a short shelf life. There is no categorization by OS, privilege level, or payload type, so the collection doesn't scale. For anyone serious about O.MG development, the official O.MG documentation and the larger hak5 payload repos are strictly better resources.

View on GitHub →

// want more like this?

We dig through GitHub every week and send a few repos picked for what you actually care about — each with an honest take like this one.

Get finds in your inbox → Search again →