Skip to main content

Practical Lock Picking

A Physical Penetration Tester's Training Guide

Practical Lock Picking: A Physical Penetration Tester’s Training Guide introduces the reader to the basic principles of lock picking. The book combines both easy-to-f… Read more

Purchase options

Sorry, this title is not available for purchase in your country/region.

Description

Practical Lock Picking: A Physical Penetration Tester’s Training Guide introduces the reader to the basic principles of lock picking. The book combines both easy-to-follow, step-by-step lessons, and tutorials that will help security-conscious people learn how to open most of the locks they may encounter during auditing or assessment work. It covers the fundamentals of pin tumbler and wafer locks; the basics of picking; beginner and advanced training; and quick entry techniques. Whether the student will be hired at some point to penetrate security or simply trying to harden his or her own defenses, this book is essential.

This instructional manual focuses on pin tumbler locks, the construction and function of which are illustrated with the aid of several diagrams. Everything from straightforward lock picking to quick-entry techniques like shimming, bumping, and bypassing are explained and shown. Guides and exercises demonstrate the use of basic lock-picking tools in order to manipulate and open these locks. The text also describes the most common "alternative" designs of pin tumbler locks and summarizes the tools and techniques that can be effective against them. It comes with a DVD filled with indispensable lock picking videos and color photos.

This book is an ideal reference for penetration testers, security consultants, and IT security professionals as well as hackers.

Key features

  • Detailed photos make learning as easy as picking a lock
  • DVD is filled with indispensible lock picking videos and color photos
  • Extensive appendix details tools and toolkits currently available for all your lock picking needs

Readership

Penetration testers, security consultants, and IT security professionals, hackers

Table of contents


Foreword

Acknowledgments

About the Author

Ethical Considerations

Introduction

Chapter 1 Fundamentals of pin tumbler and wafer locks

Pin tumbler locks

The plug

Pin tumbler lock operation

Wafer locks

Wafer lock construction

Wafer lock operation

Better wafer locks

Summary

Chapter 2 The basics of picking: Exploiting weaknesses

Exploiting Weaknesses in Locks

Manufacturing imperfections

Mechanical imperfections lead to security weaknesses

Picking with a Lifting Technique

The problem of too much tension

The peril of overlifting

Picking with a Raking Technique

The half diamond pick

Tension tools

Jiggler tools

Summary

Chapter 3 Beginner training: How to get very good, very fast

A Word on Equipment

Cutaway locks

Progressively pinned locks

The importance of a vice

The Basics of Field Stripping

Starter Exercises

Inserting and moving the pick

Feeling the spring

Setting a single pin stack

Learning Exercises

Slow down, lighten up

Two pin stacks

Three pin stacks

Four pin stacks and beyond

Challenging Yourself Further

Deep reach practice

Blindly mix and match

Using Rakes and Jigglers

Techniques of tool movement

Wafer Lock Exercises

Progressive wafer locks

Tensioning wafer locks

Extra Hints

Which way to turn

Plugs stuck upside-down

Summary

Chapter 4 Advanced training: Learning some additional skills

Pick-resistant pins

Pins with lips

Pins with serrations

Coordinated pick-resistant components

Specialized picking techniques

Counter-rotation

Specialized picking tools

Featherweight tension tools

Bogotá jiggler rakes

Practice exercises

Spooled progressive practice locks

Pick-resistant keyways

Real-world locks that offer greater challenges

Defiant brand door locks

Master Lock color-plated series and fusion series

American Lock padlocks

Advanced security pin cylinder

Summary

Chapter 5 Quick-entry tricks: Shimming, bumping, and bypassing

Padlock shims

The Deviant beer can shim

Double shimming

Unshimmable padlocks

Snapping and bumping

Snap guns

Bump keys

Comb picks

Overlifting

Using comb picks

American Lock bypass tool

Door bypassing

Slip attacks against latch bolts

Triggering door handles and push bars

Summary

Chapter 6 They all come tumbling down: Pin tumblers in other configurations

Tubular locks

Inside a tubular lock

Pick tools for tubular locks

Picking tubular locks

Odd styles of tubular locks

Cruciform locks

Manually picking a cruciform lock

Cross lock picks

Dimple locks

The secret weakness in 90% of padlocks

Summary

Appendix: Guide to tools and toolkits

Index






Review quotes

Winner of the Best Book Bejtlich Read in 2010—
"Practical Lock Picking (PLP) is an awesome book. I don't provide physical testing services, but as a security professional familiar with Deviant's reputation I was curious to read PLP. Not only is PLP an incredible resource, it should also serve as a model text for others who want to write a good book. First, although the book is less than 250 pages, it is very reasonably priced. Second, Deviant wastes NO space. There is no filler material, background found in other readily available texts, reprinted Web site content, etc. Third, the writing is exceptionally clear and methodical, with extreme attention to detail and a master's approach to educating the reader. Finally, the diagrams, pictures, and figures are superb."—Richard Bejtlich, TaoSecurity

"No matter what your background is, if you want a new and fascinating insight into this world, I don't think any book will give you a better introduction to this field than this one."—Barry Wels, Founder and President, The open Organisation Of Lockpickers

"You have exhausted your budgets on the myriad of high tech cyber threats and finally have time to take a breath. Just as you settle in your chair to review the dashboard which shows the fruits of your tireless effort, an alert hits your phone. The voice on the phone cries out 'The servers are GONE!' This book will show you what happens when attackers decide to 'get physical."—Chris Nickerson, Lares Consulting

"The clear explanation and plentiful diagrams leave the reader with a clear idea of how lock mechanisms work, and the practice exercises that follow build on this knowledge to allow the reader to quickly progress before moving on to the simpler techniques, shimming and bumping...Overall the book does much to dispel the myth that lock-picking is an arcane, difficult art and puts the reader in a position to carry out more effective physical security reviews...In summary this is an excellent practical introduction to the subject and the publishers are to be congratulated for producing another good niche penetration testing book."—Nick Dunn, BCS, The Chartered Institute for I

"Deviant’s material is presented with rich, detailed diagrams and is offered in easy-to-follow lessons which allow even beginners to acquire the knowledge very quickly. Everything from straightforward lockpicking to quick-entry techniques like shimming, bumping, and bypassing is explained and show. Whether you’re being hired to penetrate security or simply trying to harden your own defenses, this book is essential."—The Journal of Law Enforcement

"While reading this book, it will be difficult for you to sit calmly and go through it, you will be tempted to look for the locks around your house and start tinkering with it…. What makes this book easy to understand are the clear cut diagrams showing the internal design of locks. You will hardly find a page in this book without those design pictures and all of these are precise engineering-diagram types – not just some random lock pictures. It is very clear that author has taken great efforts to get those pictures right and this is what gives this book 5 star rank!"—SecurityXploded Blog

"There is a well known member of the locksport community called Deviant Ollam He has released a book on lockpicking and penetration testing of locks. Practical Lock Picking: A Physical Penetration Tester's Training Guide [Paperback] This man is an excellent teacher and has given many lectures on locks and picking."—Lockpicking.com

Product details

About the author

DO

Deviant Ollam

Deviant Ollam's first and strongest love has always been teaching. A graduate of the New Jersey Institute of Technology's Science, Technology, and Society program, he is always fascinated by the interplay that connects human values and social trends to developments in the technical world. While earning his BS degree at NJIT, Deviant also completed the History degree program federated between that institution and Rutgers University. While paying the bills as a security auditor and penetration testing consultant with The CORE Group, Deviant is also a member of the Board of Directors of the U.S. division of TOOOL, The Open Organisation Of Lockpickers. Every year at DEFCON and ShmooCon, Deviant runs the Lockpick Village, and he has conducted physical security training sessions at Black Hat, DeepSec, ToorCon, HackCon, ShakaCon, HackInTheBox, CanSecWest, ekoparty, and the United States Military Academy at West Point. His favorite Amendments to the U.S. Constitution are, in no particular order, the 1st, 2nd, 9th, and 10th.
Affiliations and expertise
Member of the Board of Directors of the U.S. division of TOOOL, The Open Organisation Of Lockpickers and Security Auditor and Penetration Testing Consultant with The CORE Group

View book on ScienceDirect

Read Practical Lock Picking on ScienceDirect