#LearnLockpickingWithAlice lesson 11: Shimming shit ('cause ain't nobody got time for dial locks).

Plenty of old or cheap locks can be shimmed, but the place this technique shines most is with those front-dial combination locks. Sure, you can look up the model number, find some arcane YouTube video, and spend 30 minutes decoding it (both the video *and* the lock)...

...or you can do a little shimming fuckery and have it open in seconds.

To shim a lock, you'll need two things: a shimmable lock, and something to shim it with.

So how do I tell if a lock is able to be shimmed? Well, there are three main types of locking mechanisms on padlocks: ballbearing, spring-loaded, and warded (which you can see an example of in lesson 10). We want the spring-loaded kind.

The easy way to tell the spring-loaded ones from the ballbearing is that the cutouts in the shackle will look like either an upside-down "7" or a "]" for the pawl, instead of a ")" which indicates a ball-bearing lock. This matters because if the only thing keeping the locking pawl (that little metal bit that grabs the shackle's cutout) in place is a stiff spring, then the only thing between us and opening the lock is reaching it.

How do we reach that pawl? With a little piece of metal called a padlock shim. They look like a little mouth with a blep πŸ‘… at the bottomβ€”and like A Christmas Story, we want to get it right up against that pole.

How to shim a padlock:
- Insert the shim with the tongue facing away from the mechanism (toward the outside).
- Pinch the wings so it hugs the shackle.
- Push it down as far as it will go.
- Rotate/work it toward the inside of the lock while keeping pressure on it.
- Wiggle and press down on the shackle a bit to help it slide in.

Once it’s in:
- Hold the shim in place.
- Give the shackle a firm yankβ€”and probably send your shim flying.

"Wtf, Alice, it didn't work?! How could you lie to me?"

Okay, slow down. There are a few reasons for that.

First, the mechanism might be on the other side of the shackleβ€”or even on both sides.

If it's still not working, the shim either isn’t deep enough, isn’t long enough, or the lock isn’t spring-loaded.

Additionally, some locks are *technically* shimmable, but the clearance around the shackle is too narrow to fit a shim in. In this case, a thinner shim, or a narrow pokey piece of metal might still work.

Finally, this lesson wouldn't be complete without mentioning that padlock shims are a disposable resource. They *will* breakβ€”sometimes after only a couple uses. If you're lucky, they'll last for dozens of attempts though.

Which leads me to my friend, @deviantollam, who is well-known for making shims out of soda or beer cans. These shims are fragile, but they'll work in a pinch and only take a moment to make. If you're good, you can even tear a can into a close enough shape for the jobβ€”just be careful, those fuckers are *sharp*.

#Locksport #Bypass #Shimming

If at first you don't succeed, try the other side...or occasionally both sides at once πŸ€·πŸΌβ€β™€οΈ

Some padlocks can't be decoded even if you wanted to.

Though sometimes you can just poke it in the right spot and it'll pop faster than you could enter the combo (just don't use your favorite lockpick) πŸ˜‹

You can use pop can scraps, or even plastic bottle strips to shim police handcuffs (if they're not double-locked). Here, I use a slim Euro lockpick.
Here's a closeup view of a padlock shim. When they fail, they tend to either split along the top edge and come delaminated, or they tear along the tongue.
@alice
At first my brain processed the first photo as a chastity device.
@silvermoon82 it all depends on how well you use it πŸ’πŸΌβ€β™€οΈ
@alice
Is the lamination for strength/rigidity?
@mister_e yeah, the top is either glued / soldered to another strip or two, or it's folded over once or twice to make an edge wide enough it doesn't cut you, and has the strength to get forced into position without bending too much.

@alice @deviantollam shim stock is a commodity item also

Mcmaster-carr will sell you all kinds

@alice Learned how to make a soda can shim from @deviantollam many years ago.. At my first BSides, I think. Myself and my kids.. Locksport is super fun. :)

@XenoPhage @alice I enjoy the fact that my silly little "M shape" aluminum can shim seems to have become the standard over the years

(I don't know that I can actually fully lay claim to it.... I feel like someone *must* have come along for me and tried a similar shape in pursuit of a homemade folded shim. But a lot of people cite my videos or slides as the reason they try to do it in this fashion and that puts a smile on my face) β˜ΊοΈπŸ”“

@alice @deviantollam I've done loads of spp, raking, bumping, impressioning etc but I've never mucked about with shimming... must put it on my to tinker with list!
@alice @deviantollam As a layperson I'm glad to see that it is still possible to open a lock using a "narrow pokey piece of metal", which I now gather is even the proper technical term - retains my faith in movie lock-picking. πŸ˜‚

@jwcph my girlfriends laugh every time lockpicking comes up on TV and I'm like 😫 "they're doing it wrong!"

@deviantollam

@alice @jwcph hehehe, I enjoyed a panel discussion that my friends and I did ages ago about lock picking on TV and in film...

https://youtu.be/mjBSocgMCPU

...oh my gosh, this was a DECADE ago! 😲

The Eleventh HOPE (2016): "Lockpicking in Real Life versus on the Screen"

YouTube

@alice @deviantollam Look, if they did it like you do it, nobody would even notice the door or whatever had been locked to begin with - it would be over too fast. Willing suspension of disbelief & all that. 😝

Now do the thing with a credit card.

@alice @jwcph @deviantollam There’s big money in movie consultancy… ;)
@alice I am both proud and concerned to say I couldn't find my suitcase key, so I shimmied it open with a little butter knife pendant in a matter of seconds πŸ€“πŸ« πŸ« 

@alice @deviantollam Amazing - thanks!

Does anyone have any recommendations for a lock for a Pods unit?

@JYeo18 @alice Abus 83/45, If the shackle fits through whatever their hasp is
@deviantollam @alice Thank you - I’ll check it out.
@deviantollam @alice U-Pack (Pods alternative) suggests ¼” max shank diameter and 2” shank length, so the Abus 83/40 should work.

@deviantollam @alice The Lock Source offers the following keyways for this lock. Are they all pretty much the same?

Yale (100), Kwikset (200), Schlage (300 & 306), Schlage Everest (EVER), Corbin Composite (400), Corbin L4 (410), Sargent (700), Weiser/Falcon (800), Arrow (900), Russwin D1-D4 (1000) or Schlage C-L (3000)

@JYeo18 that mostly just makes a difference for key control. Some are harder to pick because they have restricted keyways that don't allow much room to workβ€”but picking is almost never going to be your concern in these cases.

@deviantollam

@alice @JYeo18 I concur completely. The reason I like the Abus 83/45 so much is that you can purchase it with the same keyway as your house or your apartment or whatever and then key them alike.
@alice @deviantollam I had a practice lock I tried to pick, and failed for _years_ (I still can't seem to pick even simple locks). Then I picked up some shims at Defcon, and the lock popped open in about 10 seconds. Lesson learned; don't pick - bypass.