lockpicking forensics - black hat briefings€¦ · · 2015-05-28lockpicking forensics datagram...
TRANSCRIPT
![Page 2: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/2.jpg)
Agenda
How locks/picks work Normal wear Lock Analysis Key Analysis Investigative process
![Page 3: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/3.jpg)
Destructive entry still #1!
![Page 4: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/4.jpg)
How Locks Work
![Page 5: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/5.jpg)
How Locks Work
![Page 6: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/6.jpg)
How Locks Work
![Page 7: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/7.jpg)
How Locks Work
![Page 8: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/8.jpg)
Pin Binding
![Page 9: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/9.jpg)
Pin Binding
![Page 10: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/10.jpg)
Picking a Lock
Apply tensionFind binding pinRaise to shear lineRepeat
![Page 11: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/11.jpg)
Picking a Lock
![Page 12: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/12.jpg)
Forensic Locksmithing
1976 - Art Paholke, Chicago PD
Locks, Safes, Security (Tobias) Werkzeugspur (Goth) Impressioning (Diederichsen)
Determine method of entry Identify evidence, tool marks, techniques Provide expert testimony
![Page 13: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/13.jpg)
Pins – New
![Page 14: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/14.jpg)
Pins – New
![Page 15: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/15.jpg)
Key - New
![Page 16: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/16.jpg)
Plug - New
![Page 17: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/17.jpg)
Pins – 100 uses
![Page 18: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/18.jpg)
Pins – 100 uses
![Page 19: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/19.jpg)
Plug – 100 uses
![Page 20: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/20.jpg)
Key – 100 Uses
![Page 21: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/21.jpg)
Pins – 1,500 uses (pin 1)
![Page 22: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/22.jpg)
Pins – 1,500 uses (pin 5)
![Page 23: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/23.jpg)
Key – 1,500 uses
![Page 24: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/24.jpg)
Plug – 1,500 uses
![Page 25: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/25.jpg)
Pins - 5,000 uses (pin 1)
![Page 26: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/26.jpg)
Pins - 5,000 uses (pin 5)
![Page 27: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/27.jpg)
Plug – 5,000 uses
![Page 28: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/28.jpg)
Plug – 5,000 uses
![Page 29: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/29.jpg)
Plug – 5,000 uses
![Page 30: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/30.jpg)
Key - 5,000 uses
![Page 31: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/31.jpg)
Forensic Analysis
Components (pins, springs, etc)PlugCylinderCam/ActuatorKeysBoltDoor, window, wall, etc
![Page 32: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/32.jpg)
Lockpicking
![Page 33: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/33.jpg)
Lockpicking - Pins
![Page 34: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/34.jpg)
Lockpicking - Pins
![Page 35: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/35.jpg)
Lockpicking - Pins
![Page 36: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/36.jpg)
Lockpicking - Pins
![Page 37: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/37.jpg)
Lockpicking - Pins
![Page 38: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/38.jpg)
Lockpicking - Pins
![Page 39: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/39.jpg)
Lockpicking - Pins
![Page 40: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/40.jpg)
Lockpicking - Pins
![Page 41: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/41.jpg)
Lockpicking - Pins
![Page 42: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/42.jpg)
Lockpicking - Pins
![Page 43: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/43.jpg)
Lockpicking - Pins
![Page 44: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/44.jpg)
Lockpicking - Plug
![Page 45: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/45.jpg)
Lockpicking - Plug
![Page 46: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/46.jpg)
Lockpicking - Plug
![Page 47: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/47.jpg)
Lockpicking - Plug
![Page 48: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/48.jpg)
Lockpicking - Plug
![Page 49: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/49.jpg)
Lockpicking - Plug
![Page 50: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/50.jpg)
Lockpicking - Tension
![Page 51: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/51.jpg)
Lockpicking - Tension
![Page 52: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/52.jpg)
Lockpicking - Tension
![Page 53: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/53.jpg)
Lockpicking - Cam
![Page 54: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/54.jpg)
Lockpicking - Cam
![Page 55: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/55.jpg)
Lockpicking - Medecoder
![Page 56: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/56.jpg)
Pick Guns
![Page 57: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/57.jpg)
Pick Guns - Pins
![Page 58: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/58.jpg)
Pick Guns - Pins
![Page 59: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/59.jpg)
Pick Guns - Cam
![Page 60: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/60.jpg)
Pick Guns - Cam
![Page 61: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/61.jpg)
Key Bumping
![Page 62: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/62.jpg)
Key Bumping
![Page 63: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/63.jpg)
Key Bumping - Pins
![Page 64: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/64.jpg)
Key Bumping - Pins
![Page 65: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/65.jpg)
Key Bumping - Pins
![Page 66: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/66.jpg)
Key Bumping - Pins
![Page 67: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/67.jpg)
Key Bumping - Pins
![Page 68: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/68.jpg)
Key Bumping - Pins
![Page 69: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/69.jpg)
Key Bumping - Plug
![Page 70: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/70.jpg)
Key Bumping - Face
![Page 71: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/71.jpg)
Key Bumping - Face
![Page 72: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/72.jpg)
Key Bumping - Plug
![Page 73: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/73.jpg)
Impressioning
![Page 74: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/74.jpg)
Impressioning - Manipulation
![Page 75: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/75.jpg)
Impressioning - Manipulation
![Page 76: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/76.jpg)
Impressioning - Plug
![Page 77: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/77.jpg)
Impressioning – UV residue
![Page 78: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/78.jpg)
Impressioning – UV Residue
![Page 79: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/79.jpg)
Decoding
Depends on technique Covert vs. surreptitious
Decoder “pick” Manipulation Visual/Optical Thermal Radiological Disassembly
![Page 80: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/80.jpg)
Decoding - Visual
![Page 81: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/81.jpg)
Decoding - Visual
![Page 82: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/82.jpg)
Bypass
![Page 83: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/83.jpg)
Bypass
![Page 84: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/84.jpg)
Bypass
![Page 85: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/85.jpg)
Key Analysis
Material, keyway, cuts, codes
Original or duplicate Hand cut or machined Recent cutting, copying
Material transfer
![Page 86: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/86.jpg)
Keys - Plating
![Page 87: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/87.jpg)
Keys – Original vs Copied
![Page 88: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/88.jpg)
Keys – Original vs Copied
![Page 89: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/89.jpg)
Keys – Stylus striae
![Page 90: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/90.jpg)
Keys – Hand made
![Page 91: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/91.jpg)
Keys – Filed
![Page 92: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/92.jpg)
Keys – Filed
![Page 93: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/93.jpg)
Keys - Dremel
![Page 94: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/94.jpg)
Keys – Cutting Wheels
![Page 95: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/95.jpg)
Keys - Comparison
![Page 96: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/96.jpg)
Key - Bumping
![Page 97: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/97.jpg)
Keys – Bumping
![Page 98: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/98.jpg)
Keys – Tool Marks
![Page 99: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/99.jpg)
Keys – Tool Marks
![Page 100: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/100.jpg)
Keys – Tool Marks
![Page 101: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/101.jpg)
Keys – Clay residue
![Page 102: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/102.jpg)
Keys – Wax residue
![Page 103: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/103.jpg)
Keys – UV Residue
![Page 104: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/104.jpg)
Anti-forensics Tools?
Possible!
Difficult to use Limited durability Expensive*
![Page 105: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/105.jpg)
Safe/Vault Forensics
Drill points Writing/marking Magnetic/adhesive Tool marks
![Page 106: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/106.jpg)
Investigative Process
Crime scene investigation Laboratory examination Investigative report Testimony
![Page 107: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/107.jpg)
Crime Scene Investigation
Photographs Sketches Permission issues Evidence preservation Chain of custody
Police vs. Insurance
![Page 108: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/108.jpg)
Initial Questions
Purchase/Installation Per day usage Security rating(s) Key/combo distribution Lock condition
− Working?− Repaired?− Replaced?
![Page 109: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/109.jpg)
Forensic Examination
Lock specs & data Lock operation Lock security rating Tool marks Material transfer Keys
Do your homework!
![Page 110: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/110.jpg)
Disassembly
Chamber casings
Use of key(s)
Shimming
Destructive
![Page 111: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/111.jpg)
Shimming
![Page 112: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/112.jpg)
Forensic Workspaces Separate!
Clean area
Clean/new tools− Tweezers, followers, shims− Saws− Clay− Hands/etc
![Page 113: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/113.jpg)
Cleaning of Components
To clean or not?
Always look first!
Evidence destruction False evidence creation
![Page 114: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/114.jpg)
Cleaning of Components
![Page 115: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/115.jpg)
Investigative Report
Findings Supporting pictures Mirrored locks*
− Picked− Pick gun− Bumped− Impressioned
![Page 116: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/116.jpg)
Licensing & Certification
International Association of Investigative Locksmiths (IAIL)
![Page 117: Lockpicking Forensics - Black Hat Briefings€¦ · · 2015-05-28Lockpicking Forensics datagram datagram.layerone@gmail.com Black Hat USA Briefings, 2009. Agenda ... Impressioning](https://reader035.vdocuments.site/reader035/viewer/2022081514/5b0949db7f8b9ac90f8dd2e9/html5/thumbnails/117.jpg)
Resources
http://www.LockpickingForensics.com
http://www.LockpickingForensics.com/links.php
http://www.LockWiki.com