Thus, the pro cedure for one pin at a time picking a lock is to apply a sheer force, nd the pin whichisbinding the most,and push itup.. In order to understand the "feel" of lock picking
Trang 1Ted the To ol
Septemb er 1, 1991
Trang 2Copyright 1987,1991 Theo dore T.Tool All rightsreserved.
Permission to repro duce this do cument on a non-pro t basis is granted provided that
this copyrightand distribution notice is included in full The information in this bo oklet is
providedfor educational purposes only
August 1991 revision
Trang 31 It's Easy 4
8.1 Exercise 1: Bouncing the pick : : : : : : : : : : : : : : : : : : : : : : : : : : 23
8.2 Exercise 2: Picking pressure : : : : : : : : : : : : : : : : : : : : : : : : : : : 24
8.3 Exercise 3: Picking Torque : : : : : : : : : : : : : : : : : : : : : : : : : : : : 24
8.4 Exercise 4: Identifying Set Pins : : : : : : : : : : : : : : : : : : : : : : : : : 25
8.5 Exercise 5: Projection : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 25
Trang 49.7 PinDiameter : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 32
9.8 BeveledHolesand Rounded pins : : : : : : : : : : : : : : : : : : : : : : : : 32
9.9 Mushro om DriverPins : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 34
A.1 Pick Shap es : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 43
A.2 Streetcleaner bristles : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 44
A.3 Bicyclesp okes : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 46
A.4 Brick Strap : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : : 47
Trang 5It's Easy
The big secretof lo ck pickingis that it'seasy Anyone can learn how topick lo cks
The theory of lo ck picking is the theory of exploiting mechanical defects There are a
fewbasic concepts and de nitions butthe bulk ofthe material consistsof tricksfor op ening
lo ckswith particulardefects orcharacteristics Theorganizationof this manual this
structure The rst few chapters present the vo cabulary and basic information ab out lo cks
and lo ck picking There is no wa to learn lo ck pickingwithout practicing, so one chapter
presentsaset ofcarefully chosenexercises thatwill helpyoulearn the skillsof lockpicking
The do cument ends with a catalog of the mechanical traits and defects found in locks and
thetechniquesusedtorecognizeandexploitthem The rstapp endixdescrib eshowtomake
lo ckpicking tools The other app endix presentssome of the legal issues of lo ckpicking
The exercises are imp ortant The only way to learn how to recognize and exploit the
defects in a lo ck isto practice This meanspracticing many times onthe same lo ck aswell
aspracticing onmanydierentlocks Anyone can learnhowtoopendeskand lingcabinet
lo cks, but the ability to op en most lo cks in under thirty seconds is a skill that requires
practice
Before getting into the details of locks and picking, it is worth pointing out that lock
picking isjust one way to bypass a lo ck,though it do escause less damagethan brute force
techniques In fact,it maybeeasier to bypassthe b oltmechanismthan to bypassthe lo ck
It mayalso b e easier to bypasssome other part of the do oror evenavoid the do orentirely
Remember: There isalways anotherway, usually a b etter one
Trang 6How a Key Opens a Lock
Thischapterpresentsthebasicworkingsofpintumblerlo cks,andthevocabularyusedinthe
rest ofthis bo oklet Theterms used todescrib elocksand lockparts varyfrommanufacture
to manufacture and from city to city, soeven if youalready understand the basic workings
of locks, youshould lo ok at gure 2.1 for the vo cabulary
Knowing how a lock works when it is op ened by a keyis only part of what youneed to
know You also need to know how a lo ck resp onds to picking Chapters 3 and 5 present
mo dels which will help youunderstanda lock's resp onseto picking
Figure 2.1 intro duces the vocabulary of real locks The key is inserted into the keyway
of the plug The protrusions on the side of the keywa are called wards Wards restrictthe
setof keysthat can be insertedintothe plug The plugis acylinder whichcan rotatewhen
the proper key is fully inserted The non-rotating part of the lo ck is called the hull The
rstpin touchedbythekeyis calledpinone Theremaining pinsare numberedincreasingly
toward the rear of the lo ck
The prop er key lifts each pin pair until the gap b etween the key pin and the driver pin
reaches the sheer line When all the pins are in this p osition, the plug can rotate and the
lo ck can be opened An incorrect key will leave some of the pins protruding between the
hull and the plug, and these pins will preventthe plug fromrotating
Trang 8The Flatland Model
In order to b ecome go o d at picking lo cks, you will need a detailed understanding of how
lo cks works and what happ ens as it is picked This document uses two mo dels to help you
understandthe b ehavioroflocks This chapterpresentsamo del thathighlightsinteractions
b etween pin positions Chapter 4 uses this mo del to explain how picking works Chapter 9
will use this mo del to explaincomplicated mechanicaldefects
The mo del of a lock is shown in Figure 3.1 This is not a cross section of a
real lo ck It is a cross section of a very simple kind of lo ck The purposeof this lock is to
keeptwo platesof metal fromsliding overeach other unless the properkey is present The
lo ck is constructed by placing the two plates over each other and drilling holes which pass
through both plates The gure shows a two hole lock Two pins are placed in each hole
such that the gap b etween the pins does not line up with the gap b etween the plates The
b ottom pin iscalled the key pin b ecause ittouchesthe key The top pin is calledthe driver
pin Often the driver and key pins are just called the driver and the pin A protrusion on
the underside of the b ottom plate keeps the pins from falling out, and a spring abo e the
top plate pushes down on the driver pin
If the key is absent,the plates cannot slide o er eachother becausethe driverpins pass
through b oth plates The correct key lifts the pin pairs to align the gap b etween the pins
with the gap b etween the plates See Figure3.3 That is, the key lifts the key pin untilits
top reachesthe lock's sheer line In this con guration, the platescan slide past eachother
Figure 3.3 also illustrates one of the important features of real lo cks There is always a
sliding allowance That is, any parts which slide past each other must b e separated by a
gap The gap b etween the top and b ottom plates allows a range of keys to op en the lo ck
Notice that the rightkey pin in Figure3.3 is not raised ashigh asthe leftpin, yetthe lock
will still op en
Trang 9Figure3.2: (a) Flatland key raises pins
Trang 10Basic Picking & The Binding Defect
The modelhighlightsthe basicdefectthat enableslo ckpickingtowork Thisdefect
makesit p ossibletoop en alo ckbylifting the pins oneata time,and thusyoudon't needa
key tolift allthe pins atthe same time Figure 4.3 showshowthe pins of a lo ckcan b e set
oneatatime The ngersyouuse isamatterofpersonalchoice
Anotherwaytoholdthe pickislikeholdingap encil Withthis metho d,yourwristprovides
thepressure Ifyourwristisprovidingthepressure,yourshoulderand elb owshouldprovide
the force tomovethe pick inand out of the lo ck Do not use your wrist to b oth move the
pickand apply pressure
A go odwa toget used tothefeel ofthe pickb ouncingupand down inthekeywa isto
try scrubbing over the pins of an op en lo ck The pins cannot b e pushed down, so the pick
... in lock picking They think that thepicking toolopens the lo ck Tothem the torque wrench is a passive to olthat justputs the
lo ck under the desired stress Let me prop ose another... be insertedintothe plug The plugis acylinder whichcan rotatewhen
the proper key is fully inserted The non-rotating part of the lo ck is called the hull The
rstpin touchedbythekeyis... eshowtomake
lo ckpicking tools The other app endix presentssome of the legal issues of lo ckpicking
The exercises are imp ortant The only way to learn how to recognize and exploit the