Practical Lock Picking_ A Physical Penetration Tester's Training Guide.pdf

(8088 KB) Pobierz
Practical Lock Picking
Practical Lock Picking
A Physical Penetration Tester’s
Training Guide
Deviant Ollam
Shane Lawson, Technical Editor
AMSTERDAM • BOSTON • HEIDELBERG • LONDON
NEW YORK • OXFORD • PARIS • SAN DIEGO
SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO
Syngress is an imprint of Elsevier
Acquiring Editor: Rachel Roumeliotis
Development Editor: Matthew Cater
Project Manager: Paul Gottehrer
Designer: Alisa Andreola
Syngress
is an imprint of Elsevier
30 Corporate Drive, Suite 400, Burlington, MA 01803, USA
#
2010 Elsevier, Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or any information storage and retrieval system, without
permission in writing from the publisher. Details on how to seek permission, further information about the
Publisher’s permissions policies and our arrangements with organizations such as the Copyright Clearance
Center and the Copyright Licensing Agency, can be found at our website:
www.elsevier.com/permissions.
This book and the individual contributions contained in it are protected under copyright by the Publisher
(other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and experience broaden our
understanding, changes in research methods or professional practices, may become necessary. Practitioners and
researchers must always rely on their own experience and knowledge in evaluating and using any information or
methods described herein. In using such information or methods they should be mindful of their own safety and
the safety of others, including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability
for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or
from any use or operation of any methods, products, instructions, or ideas contained in the material herein.
Library of Congress Cataloging-in-Publication Data
Application submitted
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the British Library.
ISBN: 978-1-59749-611-7
ISBN: 978-1-59749-619-3 (DVD)
Printed in the United States of America
10 11 12 13 14 10
9 8 7 6 5
4 3 2 1
For information on all Syngress publications visit our website at www.syngress.com
To my Mother and Father
My father taught me to take pride in the things that I own, to treat them with care, and use
them properly so that they serve me well. It is because of him that I own a 10-year-old truck and
a 30-year-old jeep, both of which run just fine with half a million miles between them. I also cannot
thank him enough for teaching me to shoot at a young age.
My mother taught me the value of getting the most out of the equipment you own by learning how it
functions, inside and out, so you can fix it if the need should arise. I can remember a time when I was
all of about 9 years old and the iron in our house stopped working. My mom explained to me that
you don’t throw something away just because it is old. Fiddling with the cord, she was able to deter-
mine where a break existed in the wire; it was down near the plug.
I stood there, wide-eyed, as she cut the line, stripped the wire ends, and inserted them into an after-
market replacement plug. She let me hold the screwdriver and tighten the contact points where elec-
tricity would again flow to the appliance. I never forgot what it felt like to take something you owned
and get more out of it using your own skills and tools. You never can quite tell when you first
become a hacker, but for lack of a better point on the calendar I will always believe it started for
me on that Sunday afternoon.
. . .My
parents still own that iron to this day.
Foreword
I feel somewhat like an old man remarking in this fashion, but this book is a great example of the
wonderful time in which you currently find yourself. To be alive and learning right now—when there
are accessible resources such as this about lockpicking, with beautiful illustrations and lessons writ-
ten with passion visible on every page—that is truly something.
I reflect back and compare the state of things now with how they were when I was young. I
dreamed of being able to open locks. I knew it could be done, but I did not know how. In the
1980s, when my hunger for this knowledge was getting quite powerful, the state of educational mate-
rials was very different. Through ads in magazines I found a small publisher in the United States
offering a book called
The Complete Guide to Lockpicking by Eddie the Wire.
This book was an
inspiration, both for paying close attention during my English lessons in school (all the better to
understand Eddie’s every word) and for obtaining pick tools (which could only be found at an expen-
sive spy shop for the equivalent of $200 at the time).
It was with great excitement that I sat down at home with my first proper tool set, my book, and
some locks from the store. However, it took an entire long and frustrating day before the first pad-
lock clicked open. You know (or you will soon find out!) how it feels your first time; you will
always remember that moment! The rush was amazing and addictive. From then on I was hooked
and tried to pick any lock I could (legally!) get my hands on.
In the following decade, I published articles on my passion for lockpicking and have since pre-
sented many hands-on demonstrations at security conferences. It wasn’t long before interested parties
began forming sport picking clubs. A group of lockpickers in Germany formed SSDeV; 2 years later I
was among those who formed a group in the Netherlands. In 2001, our organization became
TOOOL—The Open Organisation Of Lockpickers. Whenever anyone asks why our name is spelled with
three O’s, we remind them that to be good at picking there is no other path than to practice Over and
Over and Over again. TOOOL has continued to grow and today we are pleased to be able to introduce
new people to the topic of locks and security all around the world.
I first met Deviant Ollam when presenting about lockpicking on a trip to the United States. I was
attempting to spread the idea that knowledge of physical security matters should be spread much like
the details and reports of computer security matters, any industry that encourages open, honest dis-
cussion will always have better products, more informed consumers, and better security for everyone
overall. When someone showed me slides from one of Deviant’s lectures, I immediately understood
that he could be quite an ally. He not only totally grasped the concepts when it came to locks, but he
also understood the bigger picture regarding the state of the security industry overall.
Deviant believes in the right of the people to understand how their hardware works in order to
properly evaluate it and use it. He now sits on the Board of Directors of the U.S. division of TOOOL
and dedicates much of his time to teaching, traveling, and making certain that those who wish to
learn can truly understand and follow along with this knowledge. He has also put a
lot
of energy into
developing his illustrations, diagrams, and training materials. The images that appear in this work are
unlike any other that most of us have encountered in reference woks at any other time; it’s amazing
to compare resources like this book to the ones which have been available up until now.
This book is quite an achievement. It is the first new text to appear in ages showing some more
advanced and up-to-date topics. This book is also perhaps the first text ever that is both suitable for
xi
Zgłoś jeśli naruszono regulamin