Practical Lock Picking Practical Lock Picking a Physical Penetration Tester’S Training Guide
Total Page：16
File Type：pdf, Size：1020Kb
Practical Lock Picking Practical Lock Picking A Physical Penetration Tester’s Training Guide Deviant Ollam Shane Lawson, Technical Editor AMSTERDAM • BOSTON • HEIDELBERG • LONDON NEW YORK • OXFORD • PARIS • SAN DIEGO SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO Syngress is an imprint of Elsevier Acquiring Editor: Rachel Roumeliotis Development Editor: Matthew Cater Project Manager: Paul Gottehrer Designer: Alisa Andreola Syngress is an imprint of Elsevier 30 Corporate Drive, Suite 400, Burlington, MA 01803, USA # 2010 Elsevier, Inc. All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information about the Publisher’s permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency, can be found at our website: www.elsevier.com/permissions. This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein). Notices Knowledge and best practice in this field are constantly changing. As new research and experience broaden our understanding, changes in research methods or professional practices, may become necessary. Practitioners and researchers must always rely on their own experience and knowledge in evaluating and using any information or methods described herein. In using such information or methods they should be mindful of their own safety and the safety of others, including parties for whom they have a professional responsibility. To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in the material herein. Library of Congress Cataloging-in-Publication Data Application submitted British Library Cataloguing-in-Publication Data A catalogue record for this book is available from the British Library. ISBN: 978 1 59749 611 7 ISBN: 978 1 59749 619 3 (DVD) Printed in the United States of America 101112131410987654321 For information on all Syngress publications visit our website at www.syngress.com To my Mother and Father My father taught me to take pride in the things that I own, to treat them with care, and use them properly so that they serve me well. It is because of him that I own a 10-year-old truck and a 30-year-old jeep, both of which run just fine with half a million miles between them. I also cannot thank him enough for teaching me to shoot at a young age. My mother taught me the value of getting the most out of the equipment you own by learning how it functions, inside and out, so you can fix it if the need should arise. I can remember a time when I was all of about 9 years old and the iron in our house stopped working. My mom explained to me that you don’t throw something away just because it is old. Fiddling with the cord, she was able to deter- mine where a break existed in the wire; it was down near the plug. I stood there, wide-eyed, as she cut the line, stripped the wire ends, and inserted them into an after- market replacement plug. She let me hold the screwdriver and tighten the contact points where elec- tricity would again flow to the appliance. I never forgot what it felt like to take something you owned and get more out of it using your own skills and tools. You never can quite tell when you first become a hacker, but for lack of a better point on the calendar I will always believe it started for me on that Sunday afternoon. ...My parents still own that iron to this day. Foreword I feel somewhat like an old man remarking in this fashion, but this book is a great example of the wonderful time in which you currently find yourself. To be alive and learning right now when there are accessible resources such as this about lockpicking, with beautiful illustrations and lessons writ- ten with passion visible on every page that is truly something. I reflect back and compare the state of things now with how they were when I was young. I dreamed of being able to open locks. I knew it could be done, but I did not know how. In the 1980s, when my hunger for this knowledge was getting quite powerful, the state of educational mate- rials was very different. Through ads in magazines I found a small publisher in the United States offering a book called The Complete Guide to Lockpicking by Eddie the Wire. This book was an inspiration, both for paying close attention during my English lessons in school (all the better to understand Eddie’s every word) and for obtaining pick tools (which could only be found at an expen- sive spy shop for the equivalent of $200 at the time). It was with great excitement that I sat down at home with my first proper tool set, my book, and some locks from the store. However, it took an entire long and frustrating day before the first pad- lock clicked open. You know (or you will soon find out!) how it feels your first time; you will always remember that moment! The rush was amazing and addictive. From then on I was hooked and tried to pick any lock I could (legally!) get my hands on. In the following decade, I published articles on my passion for lockpicking and have since pre- sented many hands-on demonstrations at security conferences. It wasn’t long before interested parties began forming sport picking clubs. A group of lockpickers in Germany formed SSDeV; 2 years later I was among those who formed a group in the Netherlands. In 2001, our organization became TOOOL The Open Organisation Of Lockpickers. Whenever anyone asks why our name is spelled with three O’s, we remind them that to be good at picking there is no other path than to practice Over and Over and Over again. TOOOL has continued to grow and today we are pleased to be able to introduce new people to the topic of locks and security all around the world. I first met Deviant Ollam when presenting about lockpicking on a trip to the United States. I was attempting to spread the idea that knowledge of physical security matters should be spread much like the details and reports of computer security matters, any industry that encourages open, honest dis- cussion will always have better products, more informed consumers, and better security for everyone overall. When someone showed me slides from one of Deviant’s lectures, I immediately understood that he could be quite an ally. He not only totally grasped the concepts when it came to locks, but he also understood the bigger picture regarding the state of the security industry overall. Deviant believes in the right of the people to understand how their hardware works in order to properly evaluate it and use it. He now sits on the Board of Directors of the U.S. division of TOOOL and dedicates much of his time to teaching, traveling, and making certain that those who wish to learn can truly understand and follow along with this knowledge. He has also put a lot of energy into developing his illustrations, diagrams, and training materials. The images that appear in this work are unlike any other that most of us have encountered in reference woks at any other time; it’s amazing to compare resources like this book to the ones which have been available up until now. This book is quite an achievement. It is the first new text to appear in ages showing some more advanced and up-to-date topics. This book is also perhaps the first text ever that is both suitable for xi xii Foreword beginners and yet also has so much to offer to those seeking advanced, professional training. Deviant explains things clearly with easy, flowing words paired with technical drawings of great precision. An absolute beginner starting out knowing essentially nothing about the subject of locks and lock- picking can be well-versed in this topic in almost no time. Perhaps you just want to open locks as a hobby, or you may be training as a professional security consultant. It could be that you want to know more about the locks you buy for your own needs, or you may be in charge of advising businesses on their security decisions. No matter what your back- ground is, if you want a new and fascinating insight into this world, I don’t think any book will give you a better introduction to this field than this one. Thank you, Deviant, for writing this book and spreading the knowledge. Barry Wels Founder and President, The Open Organization Of Lockpickers Acknowledgments This book was written over the course of one month, during which time I sat at my desk wearing my battered Navy watch cap and drinking hard cider, scotch, and jasmine tea, as the same huge playlist repeated over and over and over again full of songs from Flogging Molly, Girlyman, Emancipator, The Ramones, Billie Holiday, Trash 80, and a guitar-playing goat. Thank you, Rachel, Matt, and everyone else at Syngress for somehow having the vision to see that such a process would somehow result in a decent book.