Physical Security & Locksport

Overview

Locksport is the hobby of understanding locks by defeating them — and it's the practical side of physical security. Most digital defenses assume the attacker can't reach the hardware; lockpicking is a hands-on study of how often that assumption fails. Here I document picking a range of mechanisms, from basic pin-tumblers up through security pins.

Techniques

• Single-pin picking (SPP): setting pins one at a time by reading feedback through the tension wrench.
• Raking: faster, less precise manipulation for simpler pin-tumblers.
• Security pins: recognising and defeating spool and serrated pins by their distinctive false-set feedback.
• Bypass: attacking the mechanism around the pins — shims, combs, and design weaknesses — rather than picking at all.
• Tension control: the core skill underneath all of it — applying the right rotational pressure to read the binding order.

Picks on video

Recorded opens across different lock types

Renault Car ignition Lock — picked with Lishi-Tool

Keso Dimple Cylinder — Raking Method (Low Skill Attack)

Kaba Star Cylinder —Raking Method (Low Skill Attack)

Abus padlock 65/30 — Single Pin Picking (3 Security Pins [spools]) defeating the false set

Chinese Wirerope Brand picked (single pin picking)

Abus 65/40 picked (single pin picking)

How it maps to security work

Physical access defeats most logical controls, so physical security assessment is a real part of red teaming and penetration testing. Knowing how locks fail — and how cheap many of them are to defeat — informs better recommendations: control selection, defense-in-depth, and not over-trusting a mechanism that opens in seconds.