Chuck the lockpicks, we still gettin' in! A survey of physical security bypass techniques.

Presented at SAINTCON 2019, Oct. 22, 2019, 3:30 p.m. (60 minutes).

Locksport is cute but if you're not into pin and tumbler science why bother with it? We'll talk through the most common ways to bypass physical security controls WITHOUT bothering with picks and tension wrenches. We'll look at a set of tooling that can be used to bypass many physical controls, how to use them and for most a demo.

Presenters:

• Erich Ficker - The Cadence Group
  Erich leads the pentest practice at The Cadence Group, a compliance and security firm native to Utah. He completed his undergrad at UVU and a graduate degree from the University of London. He has been banging on a keyboard since the days of the dial-up BBS; back when windows were something that one used to sneak out of the house.

Links:

• https://saintcon2019.sched.com/event/W6Tx/chuck-the-lockpicks-we-still-gettin-in-a-survey-of-physical-security-bypass-techniques
• https://infocon.org/cons/SAINTCON/SAINTCON 2019/Erich Ficker - Chuck the lockpicks, we still gettin' in.mp4
• https://infocon.org/cons/SAINTCON/SAINTCON 2019/Erich Ficker - Chuck the lockpicks, we still gettin' in.eng.srt (subtitles)
• https://www.youtube.com/watch?v=SO865LflmkY

Similar Presentations:

• THOTCON 0x9 (2018) / Inside The Wire: Network Attacks Against Physical Access Controls
• Kernelcon 2020 Virtual / Let The Right One In
• CackalackyCon 1 (2019) / The Right Way To Do Wrong: Physical security secrets of criminals and professionals alike