Unauthorised Access: Physical Penetration Testing For IT Security Teams

5.4. Attacking Other Mechanisms

Not all locks contain pin tumblers. In this section, I discuss other locking mechanisms that you will likely encounter. The locking systems already discussed are without doubt the most commonly used form of locks. Picking such locks requires a degree of skill and persistent practice. Most other forms of locks only require the attacker to be au fait with the specific techniques required to defeat them.

Many locking mechanisms are easily defeated without any skill if you know how the mechanism works. This was less of a problem before the advent of the Internet and the easy dissemination of information that goes with it. But the Internet makes information about lockpicking available to anybody.

5.4.1. Defeating Padlocks

Padlocks are used to secure a variety of assets primarily where portability is required - for example chaining bicycles. However, padlocks are often used to chain gates and fences and are often used as a secondary locking mechanism on doors. Padlocks are usually pin tumbler based (albeit with a reduced number of pins. They almost never include the security measures discussed reviously and consequently can be attacked using traditional lock picks. However, this is often unnecessary because additional weaknesses exist in the locking mechanism. Unlike the pin tumblers found on doors, padlocks (through necessity) expose a crucial part of the mechanism, the shackle itself. Many padlocks extol the virtues of their extra secure shackles (saying ...