DEF CON 32 - Safecracking for Everyone  - Jared Dygert

DEF CON 32 - Safecracking for Everyone - Jared Dygert

Source: YouTube · DEFCONConference · published Oct 16, 2024 · 29:23

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The video details a method for picking group two mechanical safe locks by exploiting asymmetrical design flaws in the drive cam and fence mechanism, focusing on precise contact point readings to determine the combination. 2:03

Key Takeaways:
• Group two locks feature an asymmetrical drop-in area in the drive cam, creating resistance points that indicate correct wheel positions when the fence aligns with gates 9:27.
• The fence rests on wheels only when the combination is correct; resistance felt on the dial reveals gate alignment and drive cam contact points 11:13.
• A "common low point" is found by testing contact points at 10-increment intervals across all wheels, identifying where the nose of the lever is furthest down in the drive cam 18:58.
• Wheel isolation allows one wheel to be adjusted at a time; a drop in contact point indicates the correct number in the combination 14:12.
• The second wheel is isolated using the same method, and the first wheel is brute-forced after two valid indications 21:13.
• Models like Lard 3330 and DBO differ in drive cam symmetry—DBO’s symmetrical cam allows more precise contact point readings 23:49.

Success requires precision in dialing, consistent contact point reading, and practice using tools like the Sophie Safe Cracking Simulator or Jared’s free PDF guide.

Sources:

  • 2:03 Overview of group two locks and their vulnerabilities
  • 9:27 Asymmetrical drop-in area in drive cam and resistance points
  • [11:13](https://www.y

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

all right sorry for the delays so this is safe cracking for everyone my name is Jared okay so a little bit about me I am a lock sport Enthusiast I have been picking locks for close to 20 years now and I got into safe manipulation shortly after uh so I've been doing that for about 15 years uh I game a bunch um and I'm a professional rock climber that's like my main source of income at the moment so this talk this talk will cover how specifically group two mechanical safe locks work so there's different classifications which I will go over and group two is sort of just the standard sort of security classification for safe locks um whatever safe you buy essentially if it has a mechanical lock on it vast majority of the time it will be a group two uh safe lock I will cover the flaws in this de…