Lock Picking & Bypass
Exploitation
Understanding how locks work allows security professionals to identify weaknesses and bypass mechanical security controls.
Basic Tools
- Tension wrench set
- Hook picks (short, medium, deep)
- Rake picks (Bogota, snake)
- Diamond picks
- Ball picks
- Warded pick set
Advanced Tools
- Electric pick gun
- Snap gun
- Bump keys
- Tubular lock picks
- Disc detainer picks
- Decoder picks
Bypass Tools
- Under-door tool (UDT)
- Shims for padlocks
- Comb picks
- Travelers hooks
- Air wedge
- Crash bar bypass
Pin Tumbler Lock Picking (SPP)
Single Pin Picking - the most precise method:
- Insert tension wrench at bottom of keyway
- Apply light rotational pressure (direction lock turns)
- Insert pick above tension wrench
- Feel for binding pin (the one hardest to push)
- Push binding pin up until it sets (slight click/give)
- Maintain tension - don't release!
- Find next binding pin and repeat
- When all pins set, lock opens
Raking Technique
Faster but less precise method:
- Insert tension wrench with light pressure
- Insert rake pick fully into lock
- Scrub/rake pick in and out rapidly
- Vary tension while raking
- Some pins will set by chance
- May need to SPP remaining pins
Common Lock Types & Difficulty
| Lock Type | Difficulty | Notes |
|---|---|---|
| Kwikset | Easy | Good for practice |
| Schlage | Medium | Spool pins possible |
| Master Lock | Easy-Med | Varies by model |
| Medeco | Very Hard | Rotating pins |
| Mul-T-Lock | Very Hard | Interactive elements |
| ASSA | Hard | Sidebar mechanism |
| Abloy | Expert | Disc detainer |
Bump Key Attack
- Obtain or cut bump key for lock type
- Insert bump key one pin depth short of full
- Apply light tension
- Strike bump key with bump hammer
- Pins jump, lock rotates
- May take multiple attempts