OMG Cable - Android Reverse Shell - Payload & Detections

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005
____________________________________________
SHOW NOTES:

Testing was done on out of box Android devices with default settings.

Payload:
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

[hermesvoeglein]

Thats why one of the first things to do with a new android device, to toggle off data transfer via usb and just allow it for recharging, unless you actually need it. Just like with wlan on any "smart"-phone, toggle it off when not in use and unallow the automatic connection to any wlan-network even those you deem save. Does a lot for your personal and professional safety, with minimal effort and zero cost.

[evodefense]

Amazing payload and appreciate covering the detections also!

[-Rishikesh]

Doesn't Android 12 show notification when you access camera or location ?
Does this payload bypass these security measures ?

[Jianju]

Int80, what is the name of your band? Ah, got it at the end: "Dual-Core". Thanks.

[scriptkiddieclub]

dont u need to have usb debugging on in settings?

[hobofilms]

What happened to Nullbytes he hasn't made a videos in a while

[gnorbsl]

So this means a phone has to be unlocked to deliver the payload correct? Just plugging it in is not enough

[xxigotruktdxx]

does it still need to be connected to a computer for it to work or can you just have it plugged into a charger

[xsTaoo]

Is there any way to make remote control persistent? The connection will be lost every time the phone is turned off.

[elbowsout]

Good stuff. I'm going to have to get one of these :)

[gloriagm]

Hello, u make it all seem so easy, it's been 5 yrs, that my phone has been hacked, been through 100s of phone and changed providers but some how they hack into it and get into my my bank accounts and don't know how they hide their transactions, am tracked every move I make and continue to break into my home, text friends as well and become victims as well... Where can I go to get help with this issue as law inforcement seem not to be much help without proof

[ashlie-fvdw]

Hey, I've been a target by some psycho who's been using a cable and r.a.t against Me to ddoss and drain my assets and rob my house. Is there anyway to reverse the connection and use a honey pot from the infected device

[PepeTostado]

How do you do it without showing the process on the phone? Like as a daemon

[BrandiXo]

Omg!! What if you think you may have used a hacked charger?How do you find out on your phone and how do you get it off your phone?? What if you plugged the USB c into laptop and USB into chsrger?

[julymugale]

Shipping restrictions: I am in South Africa and i need a OMG cable for android. How do i bypass shipping restrictions to certain regions of the world. I dont even understand why shipping restrictions. Please help

[zmmermn]

Does it matter if the phone screen is locked?

[SouthSaxonMan]

What if you have disabled Chrome. Does this still work?

[nonymous]

Where do you get the O.M.G. software? Is there an app to use once remote access has been achieved with the target device?

[Kogitto]

Does anything of this work with turned off screen?

[charleneduggins]

I am pretty possitive this is happening to my family can you please help us reverse it and make it stop please it's ruining my life