Explanation of cracking a combo lock in 8 attempts or less!

Подписаться 204 тыс.

Просмотров 510 тыс.

50% 1

In this follow-up video I go over the full details of cracking open any Master combination lock in 8 tries or less. In my previous video, I provided a simple online tool to crack open any Master combination lock in 8 combinations or less! This new technique will allow you to learn the combination of any Master combo lock with only eight attempts maximum:
samy.pl/mastervuln/
Online calculator: samy.pl/master/
By Samy Kamkar
First part here: • Break open any Master ...
Third part coming soon!
Questions? Leave a comment below!
Subscribe to my channel for more Applied Hacking videos: ru-vid.com_...
Join the Applied Hacking mailing list: samy.pl/list/
Follow me on Twitter: / samykamkar
Music by Darin Leach & Samy Kamkar (Epoch Rises / epochrises )
Intro graphics by Darin Leach: darinleachgraphics.com

Наука

Опубликовано:

10 май 2015

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 546

@erics8302 4 года назад

Thanks......I got my lock open and had a lot of fun learning why it opened. When I can see how something works I can understand it but when I see a video or read something I have no idea. This was one of the best videos I have ever seen. Incredibly entertaining. Thanks again.

@kebers 4 года назад

I did it! I am so proud of myself. I watched your video and re-watched many sections to make sure I followed your instructions exactly. I watched some other videos before yours. They were close, but not as exact as your method. I wasn’t able to figure out the second number till I watched your video. Thank you! I’m so happy. 😊

@samykamkar 4 года назад

Awesome job!! I’m proud of you too.

@judgeomega 8 лет назад

at 12:00 you try to measure distance. Would have been much simpler to just turn the dial until the gap is lined up. Then note the the difference of the reading on the dial.

@samykamkar 7 лет назад

I'm a newb

@groeszs 7 лет назад

Lol.... I think the joke "How many engineers does it take to change a light bulb" is apt here... :)

@NickC_222 7 лет назад

judgeomega I was thinking the same thing. It seems so obvious when looking at the internals, right? Why complicate it with measurements and finding the circumference when you have a cutaway lock specifically for finding these vulnerabilities? The distance between the "indentation," or rather the protuberance, and the groove in the wheel is never going to change or even vary from lock to lock.

@nicko3512 7 лет назад

While the exploit he found is pretty smart, I think he was trying to seem *extra* smart by doing the unnecessary calculation, but in reality it backfired

@samykamkar 7 лет назад

+Vranvs don't worry, I'm not that smart

@Robertlavigne1 7 лет назад

It is known that the second number is generally, approximately half a rotation from the first digit (from Carl Blacks book on combo locks). While this is not a set rule, I believe sorting the list of 8 options by distance from the first digit (farthest first) will enable you to open in fewer tries on average.

@emofaeriechick13 4 года назад

I got my lock open! I cant believe I was able to get it open. Your video and webpage is the only one that found my combo. Thanks for putting it all together. Keep up the good work!

@samykamkar 3 года назад

Great job! How did it feel to open it? :)

@talhatariqyuluqatdis 4 года назад

We need MORE VIDEOS from you. Come onn, it isnt as hard as the work youre doing. Get it going!

@Nite0wl 9 лет назад

The 'metal bar' you point out around 3:11 is a return spring to force the latch to snap back to the closed position when the shackle is opened and closed. The 'Anti-Shim' modification Master made is the addition of deep serrations on the upper surface of the latch (the portion facing the opening of the hole that the toe of the shackle enters in the body.

@samykamkar 9 лет назад

Nite 0wl Ohh, very cool! I'll note your comment in the annotations with attribution to you -- thanks Nite-diggity!

@penfold7800 Год назад

I honestly didnt know that. I was glad to see that the two floating disks were metal and not plastic, so kudos to Masterlock for that, but WHY did they leave access holes behind the dial that arent present in other versions of this type of lock. Easy vulnerability to just lever off the dial and push the locking pall back.

@ChrisDunn 9 лет назад

Samy, That "extra" bump on the first digit tumbler actually does serve a purpose. You stated in the video it was not needed. The shackle retainer clip is built the way it is with that little bent step to kick against that bump on the tumbler to spin it slightly once the shackle is opened. This provides the "relocking" of the lock so the shackle locks the next time is inserted. Without that feature the lock could be left in the unlocked position unless the dial was spun every time to scramble the tumblers. Excellent catch by the way on figuring out the resistance bump against the relocker. Long ago I had an offset table, that if you gave me an open lock, I could look in the shackle hole and see the tumbler notches and from there tell you the combination. Master locks are fun. :)

@cigmorfil4101 6 лет назад

Chris Dunn not quite right - it's as the shackle is extracted that the third disc (1st number) is perterbed so that when closed (hence the spring on the latch) it is not unlocked. However it less than scrambles the discs - it moves the last disc slightly. If you open your lock and do not turn it (at least 3 complete revolutions) at some stage before leaving it, it is very easy to open - 1) note the unchanged 3rd number 2) turn dial gently to left until you feel (hear) the lug on the 3rd disc engage with the lug on the 2nd disc - note the 2nd digit of the combination. 3) keep turning to the left until you feel (hear) the lug on the 2nd disc engage with the lug on the 1st disc; add 5 to get the 1st number. 4) to unlock continue turning left until 1 less than number of engagement in step 3 (= 6 less than 3rd number) 5) turn right past that number to 2 less than 2nd number 6) turn left to final number. Alternatively: 1) note 3rd number 2) turn right until you feel the lugs between discs 3 and 2 engage - subtract 2 from number to get 2nd digit 3) keep turning right until you feel the lugs between discs 1 and 2 engage; move one number further on - you have the 1st number 4) to unlock continue as normal to turn left for 2nd and then right for 3rd digits.

@jodywhelchel5134 4 года назад

://ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-w8QQrhS9TO8.html Sure what’s

@agxphoto 8 лет назад

This is the explanation I've been looking for. I applaud your approach, your observations, your demonstrations and constructions. Bravo!

@samykamkar 3 года назад

Thanks!

@billypilgrim3000 3 года назад

Pedagogical genius! How brilliant and simple, actually to take apart the lock and show exactly how and why the "find the resistances" methods work. There are several videos showing how to do this but you'rs is the only one that goes inside the lock. True, there are shorter ways to calculate the math, as some have commented, you could streamline that, but this is really impressive. You're a great teacher.

@samykamkar 3 года назад

Thank you! Yeah, definitely could have simplified the math and effort!

@kaitachi08 7 лет назад

Kudos for the excellent explanation throughout the video!! You really did a great job there with how you worked out this method of cracking open these types of Master locks, and thoroughly pointing out most details and how observations led to clever ideas. Keep up the great work!!

@ericbaier6176 9 лет назад

The indentation on the first dial that you use for the 1st number attack IS useful in the lock. When you pull up the shackle to open during a correct combination, it scrambles the wheel pack to keep the shackle locked the next time it's pushed closed. But great a video.

@penfold7800 Год назад

Good spot. most people seem to miss that. On some locks of this type its when the shackle is pushed back down to lock it that the shackle retaining plate knocks the wheels to scramble them. I noticed when I first pulled one of these apart and I asked myself why that retaining plate was shaped that way and not just a spring clip. ...more worryingly in this video... If you look through to where the locking bolt is, on the front plate behind the dial, there seems to be some access holes. So you could easilly yank the dial off using a sharp flat-head screwdriver and then push the locking pall back through that hole with the same screwdriver. Those holes arent there on other versions of this type of lock so I have no idea why Masterlock included them here. Maybe it was a manufacturing shortcut. Masterlock keep doing these stupid things. They do a good job of making a lock physically strong, and then leave in or include a vulnerability. Back in the days of lock development, weak points or Drill Points were left in or included on purpose so that Locksmiths or Police could get past a lock if needed. That I believe was originally a legal requirement. But that was many years ago before portable drills with carbide diamond tipped drill bits and Portable grinders with cutting discs were readilly available (or invented). Theres absolutely no need for that kind of requirement nowadays. Its about time Masterlock beat the markets overpricing and made locks without added weak points.

@GIJew 8 лет назад

Another fine example of what happens when companies cut corners to save a little bit of money.

@isaacchen6630 8 лет назад

Xbox disc reader...

@djscurge 8 лет назад

Yeah you'd think, but there was likely several meetings to discuss if the cost/value ratio of that corner. They asked the question "Would the amount of money we would save in manufacturing be greater than the potential impact to sales if the vulnerability were made public?" The answer was obviously "Yes"... Master Lock probably even hired an actuary (That's what you can do with a math degree kids. $100K/year avg. google it.) or two to figure that ratio out. The depiction in Fight Club of the car manufacturers assessing whether to do a recall or not isn't too far from the truth of nearly all industry, on all levels (not just the safety critical industries). I too had no idea how convoluted the whole corporate mechanism becomes, all in the pursuit of one thing: profit margin.

@lancelot1953 9 лет назад

Nice explanation Samy, thank you for showing the community the inner works and the logic behind Master-type lock. Amazing looking at the cheap way the third wheel is made to save money! Ciao, L

@btpcmsag 8 лет назад

I took one apart long ago and found the combo that way, but I did not observe all the things your video shows. Thank you for a very easy to understand exposition of the works! I knew boys who could pick combo locks in the 1960's but they couldn't explain the reasons their method worked.

@samykamkar 8 лет назад

+btpcmsag Thanks!

@andrewlisenby 9 лет назад

...and, subscribed. I started reading up on your exploits after I found your DEFCON lecture on PHP's LCG weakness and NAT pinning. Amazing! Looking forward to any new networking related exploits.

@samykamkar 8 лет назад

+Andrew Lisenby Awesome!

@AquaTeenHungerForce_4_Life 8 лет назад

This video should be shown to any kid who says, "I'll never need to know this type of math." Lol, sure. They might not "need" to know how to do this, but how many wouldn't "want" to know. :) Awesome video!!

@samykamkar 8 лет назад

+mark johnson Thanks!

@bulldozer8950 4 года назад

Why do you think they make math boring? They can’t have the less behaved kids running around using what they learned in 8th grade math to get into the boiler room at school and shut off all the heating for the building.

@NicholasAarons 9 лет назад

Another Fantastic Video Dude. Keep up the great work. Nick.

@Raincountry 8 лет назад

Really liked your explanation and seeing the inner workings shed a lot of light. Reclaimed 2 old locks this weekend. Cheers!

@samykamkar 3 года назад

Nice job!

@ahmedtwakkal841 9 лет назад

Thank you very much Samy!!! Your crack worked for me and I like the fact that you used math and computer programming to come up with the crack. I have been occasionally trying to open my Master lock for the last 6 months using the feel method described in many other videos and have had no success. I was able to open my lock using your method within 10 minutes. AWESOME!!! :^)

@samykamkar 9 лет назад

+Ahmed Twakkal Sweet!!

@DaveJacoby 9 лет назад

I always wondered how combo locks work. Thanks.

@edwardvarby4363 5 лет назад

I've a few locks I've done this on, but one is almost exact same lock, except I think the dial is 0.25 of a digit off. That really threw me off, & the combo label fell off. Had to go through it a few times, but it was so satisfying when I uncovered the lost secret! One thing i've played with is trying to speed up dialing by just bumping the 2nd number & redialing the 3rd, & eliminating combos where dialing the 3rd messes up the 2nd. That's one reason I liked this video. Great to see how it all works inside. Anyway, great job!

@tgy119 3 года назад

Thank you for this video. I watched a bunch on RU-vid and this was the only one able to crack my gym lock. Haven't been to the gym due to covid lockdown so I forgot my combination.

@justinwatson1510 27 дней назад

You are genuinely brilliant and I appreciate you sharing your knowledge this way. Thank you.

@H0RRAX 9 лет назад

I realy like what you are doing and your way of thinking. Keep up the good work!

@OlPurpleBeard 9 лет назад

Samy- for as many presentations you've given, you don't seem super confident on the spot. You deserve to be, you're doing an excellent job.

@lorinwells1466 4 года назад

This method works really well! I had to try several different #s for the second combination because I couldn't tell if the first number was 10, 11, or 13. Finally clicked open!!

@DarcyWhyte 9 лет назад

For the first digit, why not move the dial to point of resistance (as you did), and then in the next step move the dial to the first digit in while eyeballing the disk. Now you know the difference between the point of resistance and the first digit (in dial numbers).

@TusharThakur 9 лет назад

You are father of genius. Hats off

@nadacommie6235 8 лет назад

I like your videos, i have been a lock collector for a long time but haven't had the time to enjoy and explain the fascination i have for them. i wish i had a better education with math, your explanations make perfect sense to me but i seem to intuitively feel the logic and understand it but cant put it into words and document it the way you do. keep up the good work!

@samykamkar 8 лет назад

+David Clark Thank you!

@Texas-it9ci 3 года назад

BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! BOO!!!!!!!!!! NOT WORK AT ALL AFTER A MILLION TRIES SO THIS VIDEO MUST BE HOAX!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

@jacobfrost656 9 лет назад

Great video! Can't wait to see next video

@orgigami 9 лет назад

Storage lockers everywhere just shuddered.

@ButtMan8888 9 лет назад

Love your work and your videos! Very well-made and informative.

@samykamkar 9 лет назад

+Terry Bogayong Thanks Terry!

@jimlocke9320 8 лет назад

I have a number of earlier vintage locks and I believe that the "collar" does not contact the "protrusion" when the lock is closed. Master Lock may have made some dimension changes which introduced the vulnerability. In any case, it would be difficult to tell the difference between that resistance and the resistance of the "lever" contacting the notched third wheel. With an open lock, you can leave the shackle outside the latching hole and turn the dial left multiple times with the shackle at held loosely at different heights. The "latch" will stay clear of the third wheel during this test, so the only resistance is that noted by Samy. At certain heights, the "collar" will contact the "protrusion" and actually lift the shackle. Using this method, you can determine the minimum height where the "protrusion" contacts the "lever". Then close the lock and see if the shackle will lift high enough before the "latch" is pushed against the third wheel. Note that this method will always allow someone to use Samy's method to find the combination for a lock that has been left around open, so never leave an open Master Lock unattended. A thief can determine the first number this way, then come back later and use Samy's method to open your locked padlock when no one is watching.

@samykamkar 8 лет назад

+Jim Locke Interesting! I was able to feel the protrusion in all Master combo locks I've tested, including several brand new ones and several older ones, with one being at least 10 years old (the newer ones were easier to feel for the protrusion, however the old ones had it), however I doubt I have any as old as some of yours!

@nish3258 5 лет назад

Hi there, I realize 2 years have gone by. I found this video as part of a master lock search. I too have experienced the inability to feel the relock tab hitting the bump on the 1st number wheel. In fact, with the shackle unlocked and spinning the dial as suggested, I found the following. I found that the shackle needs to come out about 1/16" beyond the interference point between the lever fence and the 3rd wheel false gates. I tried 6 old locks that are 20 plus years old. I could feel the relock rub on just 1 of the locks. I too wonder if the vunerability (the relocker hit on the 1st number wheel as the shackle is pulled up) is only detectable on newer master locks?

@jg-bordfronco2925 8 лет назад

For the first time in my life, i finally understand why Math is so important =) Great video Samy!

@andrewford80 8 лет назад

I wish I had paid more attention at school

@Gryphon018 8 лет назад

Brilliant analysis! I very much enjoyed this video!

@samykamkar 8 лет назад

+Austen S Thanks!

@meerabakshi2676 2 года назад

Though I am not yet been able to open up my master lock, I enjoyed the math you applied, my son at 4-5 years of age, was also very inquistive about how something works from inside, and your opening up the lock to look from inside reminded me of those days! :-D Very confusing to feel the frist number clicking...it will take time but I will keep trying! Thanks.

@ivegas1000 7 лет назад

I'd be damn. After watching quite a few RU-vid videos on my MasterLock 1813M that I forgot combo for a long time and was not able to use. Was getting quite disappointed with all of them because they were cumbersome and confusing. Then picked this video by Sammy because he had 300,000+ views and I said "why not?" Follow exactly his instructions and on second tries got my combo back!!! Bravo, Sammy and thanks much for your help. Now I am subscribing, who knows what other hacks he can give me.

@ianbot 5 лет назад

Wow I swear it actually worked I was so excited when the lock popped open I did not believe it would work at first but it really does i subbed

@GeorgeBurnett 9 лет назад

Excellent work buddy! Keep it up :)

@Rulerofwax24 6 лет назад

Thanks for this video, it really helped. Though, the calculator wasn't working out for me, so I ended up following this video by hand. The error came from the resistance location. On my lock it was pretty much 4.5-5.5, so 5. Based on the math from this video, 5 + 5.76 = 10.76, round to 11 [my real first digit]. However, your calculator says the first digit is 10, which throws off all the rest of the calculations. Putting in 5.5 gives an accurate combo set, but putting in the more real-world accurate 5 messes it up. In any case, I'm glad I had this video to follow along with. This lock has been sitting on my desk (well, around it really) for 4 years.

@fryloc359 2 года назад

You can also pop the dial off and use a thin wire like a paperclip to line up the discs and pop it open that way. However, due to the springs holding the discs, you can't just press it back on.

@pfsmith007 7 лет назад

Damn Samy, you're smart. I really enjoyed watching you work. Thanks for posting the video.

@samykamkar 3 года назад

Thanks!

@mandolinic 8 лет назад

This three disc design is the traditional combination lock used in safes! Properly made, it's very secure.

@CandiceJoergan 2 года назад

Thank you for telling me where the dial is on this lock. I never would have figured it out without you.

@samykamkar 2 года назад

I'm so happy to help.

@Frosty-oj6hw 9 лет назад

Another great video Samy.

@lilblkspider 7 лет назад

I managed to remove a lock using your method am amazed at how this worked.

@bradstronger4438 8 лет назад

The indentation on the back of the rear dial is not "useless." The interaction of the shackle collar and that bump scrambles the dials when you open the lock. It's the reason you can't just close and open the lock again. Also the metal "bar" at the top is a spring, it's not an anti-shim device. Try assembling the lock without it and see how it feels mushy when you pull on the shackle.

@btpcmsag 8 лет назад

+Brad Stronger -- I was going to tell a friend that little button on the back of the 1st number dial is only there to save Master some money. Now I'm glad I read your comment. Whoever settled on this design probably thought that leaving the button there (making the first 2 dials the same) could serve as the method of scrambling the combo automatically, and it's convenient that can be done using two identical dials. They perhaps never thought about the picking vulnerability.

@samykamkar 8 лет назад

+Tobia C. Interesting!

@cigmorfil4101 6 лет назад

The one i have doesn't have a single bump when trying to find the first digit - it has 3 roughly evenly spaced across 8 digits, none of which is 5 from the correct first digit. It does however have the same 2nd and 3rd discs that his lock has (which are both the same - I hope there are other discs which can be put there): subtract 14 from the first digit and I (and he) get our second digit. It also has a key override in case combo lost. The combo can be converted into a left-handed version by subtracting 6 from the first number, add 2 to the second and leave the third alone.

@guyflynn8216 7 лет назад

5:30 wait a second the little sticky out bits that catch each other are at set distances from the notch cut into the disc that lets the lock open meaning that if you figured out the point when the two discs meet (it would be quite easy if you were feeling for it) you can count a certain amount of numbers over and find out the numbers and what order they are in!

@DellAnderson 8 лет назад

Just wanted to say, you saved one of my newer forgotten-combo locks from the rubbish bin. However, my confidence was short-lived as I was tried it on a second Master lock (purchased c. 2010) on which I wasted half a day trying to open it! Fortunately, remembered where the combo was written down and sure enough, the last two digits were among those listed on your website, but the first number was completely off. So perhaps Master made some earlier versions with a major different 'resistance' point to gap distance. Even now, knowing how it works, I'm not sure how to explain the discrepancy because I even had someone else try to find the resistance point and came up with the same numbers I did. So apparently the 5-6 digit difference between the protrusion resistance ('indentation' in your video) and the lever gap is not always uniform in all locks. This lock is definitely a Master, but feels slightly better made than the cheaper version that I easily opened, but maybe that is just my imagination after struggling with it for several hours (nothing compared to what you put into making this video without which I never would have opened the first lock however, so thank you!)

@nikushim6665 8 лет назад

From what i remember that spring loaded latch was also a major vulnerability, unless they fixed it. Master lock wise you used to be able to just tap the shackle with a blunt object wile lightly pulling on it to retract the locking paw.

@StevenHongMN 9 лет назад

You stated that the second number cannot be close to the 3rd number by 1 position away in either direction. Would it stand to reason that the first number could not be close to the second number for the same reason? I would think that you could eliminate one of the numbers based on closeness to the 1st number.

@FrancisDanielRayn 9 лет назад

I wasn't sure that this video was legit until I saw you put on those Kanye glasses. Well done 🙌

@JacoxNovak 9 лет назад

great explanation!

@stratman1234 7 лет назад

Thanks for the video. I bought a new Master lock today and noticed that the feel of the knob turning was more like a scaping feel. I guess that's what happens when you buy a new lock for $3.23. I was having a difficult time getting the first number. I suppose that might be due to sloppy tolerances on Master's part. After I entered the first number, the rest of the numbers all fell into place and I successfully opened the lock. Great video.

@samykamkar 7 лет назад

Nice!

@kiarashgholami3092 6 лет назад

Really interesting. I tried it and it worked! Thank's body!

@DaveGamesVT 7 лет назад

Interesting video. Hopefully this will lead to them improving their design.

@jacka602 9 лет назад

Samy! You have been my hero ever since I heard about your MySpace virus. Please make a guide or tutorial teaching us the basics of coding and what softwares to use etc. :)

@jacka602 9 лет назад

Jack Atherton Also a hack on how to improve internet speed, would be *AMAZING*.

@samykamkar 9 лет назад

Jack Atherton Thanks Jack! Okay, I will add these to the list of videos! I have a few upcoming that I need to get out first...stay tuned

@mauroz100 4 года назад

This is so amazing!

@RobertLandrum13 8 лет назад

Great stuff. Was able to open a drawer full of locks I've lost combos to.

@samykamkar 7 лет назад

Lockception

@davemarm 9 лет назад

Great video! One question: Why did you do the calculations with diameter, circumference, etc in order to get the # of digits offset from the resistance digit (for the 1st number of the combination)? It seems like you could have just manually turned the dial to read off the value on the front and determined visually that the difference is 5.5 digits between resistance and where the notch lines up. That would remove some of the rounding and measuring errors inherent in the caliper.

@1danleung 8 лет назад

I have to say that only certain Master Locks will follow this mathematical model, maybe locks form the same batch. I have a Master Lock with resistance point at 15 and the 1st digit is 22, offset by 7, not 5.5, maybe the disc size is different. And my 3rd digit is 25, MOD(22,4) is not equal to MOD(25,4) as in your case. And my 2nd digit is 3 which will not work with the formula MOD(3,4)+2 equals to MOD(22,4) or MOD(25,4) as you said. But the basic design and mechanic of the lock is still the same.

@yalchinhuseynov2987 3 месяца назад

Thanks for your video. I just opened my Dudley combination lock after using your method 👍

@mechanicalengineerunprofes8382 7 лет назад

I definitely love your vedio. Hope to see more on youtube.

@frankyboy4409 9 лет назад

The metal splate is just a spring. The Anti-shim is the two groves on the latch (because that catches the shim and prevents it from pushing the latch away)

@darkdancerman 9 лет назад

Please upload videos on hacking more things. You are very good at it, and informative.

@kevincozens6837 7 лет назад

It would take only a small modification to the shackle collar by the manufacturer to avoid that rubbing that gives away the first number. The number of possible combinations would go up by a factor of 40. It would still be a manageable number for the Combo Breaker but take a little longer to crack the combination.

@timewave02012 8 лет назад

I wish I had known the first number trick 15 years ago. I also vaguely recall the third number giving me trouble with some locks. Maybe it was slight dial misalignment? Eventually I figured something out and would always get it right, but I might not have been able to describe how I knew then, and I definitely can't now.

@ArgusBrown 9 лет назад

Instead of calculating the distance along the circumference per digit could you have just spun the dial until the gap is in the correct position and just read the number off the dial. (or am I missing something?) Interesting video. Now I wish I hadn't thrown that old master lock away.

@sunny52489 9 лет назад

YESSS I thought you stopped making videos :D

@flyrcm 2 года назад

Cracked one lock after watching your video ! 👍👏

@AlchemistandHackerYA 9 лет назад

Dude I love your videos your super cool keep it up

@samykamkar 9 лет назад

HackerMcGaming Thanks!

@dougholtz 7 лет назад

I just got back from Sydney, AU. Had tried picking an old master combo for some time before going. Saw a Master combo near Mrs MacQuarie's "chair" overlooking the harbor. Wished I had success on the lock here before encountering one ever so far away from the US. Still can't open this old thing here.

@christopherjamesblackwell 6 лет назад

Excellent video.

@mendymerkur2982 7 лет назад

Very Nicely explained

@FlowersForYou629 9 лет назад

too bad Masterlock will see this video and change the design. Thanks for the video. You actually know what your doing in your videos.

@rickpaulos 5 лет назад

Masterlock did change the design when they started making these locks in China. Those are even easier to pick like this demo lock.

@mariustancredi2192 8 лет назад

Does that last knob has anything to do with auto-locking mechanism? By auto-locking I mean the mechanism that prevent the lock from opening again when you closed the lock but didn't turn the dial. Master Lock should make different plates to the knob isn't predictable.

@slavaaa1869 7 лет назад

Samy is my hero :)

@mancake9411 5 лет назад

Thank you, I had a mental breakdown from all of the other videos

@yellowdogparty 7 лет назад

I just found this. Cool video and interesting vulnerability. I was just thinking about this lock I had in HS in like 1998 (I'm John Nash sometimes) and the distances between the numbers of my lock and yours are similar. In looking at the design while you demoed it, wouldn't the middle digit be approximately 180 degrees to the others so that it forms that channel properly? If you take the distances from the last and first digits from the center it's around 24 digits for both your lock and mine. Might be something that can simplify your formula to one or two possible combinations. I could be wrong but it seems possible.

@michaelchaney175 9 лет назад

Note the collar that holds the shackle in place also acts as a "scrambler" to make sure the lock can't be opened again after pushing it shut. That might be the reason that they use a disk with an extra bump on the first ring.

@samykamkar 9 лет назад

***** Oh, very interesting!

@variablestar90 8 лет назад

Dear Samy, I tried to apply this method ito two different locks and it didn't work out. I turned out that the problem was with the third numer. It is not always the same modulo 4 as the first number. After watching how this locks work, I tried just to find the number with the widest gap or the smoothest gap of all locked numbers and then it worked out :) Thirst and second numbers were consistent with your method, so if you modify your calculator it would apply to wider range of such locks. Tested on two locks from different producer. Love your videos! Cheers

@PinkSistahs 8 лет назад

Well im sure the numbers are right but for some reason none of the combos are working. its definitely 3-6-2 for the numbers entered in the calculator. Is there any reason i could be doing this wrong or can i use a different resistance #?(as in maybe only adding 3 or 4 to the resistance)

@nexus1g 7 лет назад

I think the anti-shimmy tech is the ridges in the latch. It would prevent anything rigid enough to push the latch back from getting in between the shackle and the latch by catching it.

@TheWireEDM 9 лет назад

If there just would be a simple graduated dial to see how many numbers to offset from that "indentation" of yours to the actual combination number...oh wait...

@dooden01 9 лет назад

VERY GOOD WORKS REALLY WELL

@SilverTheFlame 9 лет назад

Amazing. Thank you

@PhiltonPhillips 8 лет назад

Great video!!

@samykamkar 8 лет назад

+Phil LeBlanc Thanks!

@paulmckinney6147 8 лет назад

Your amazing sir!

@samykamkar 8 лет назад

+paul mckinney Thanks!

@epicguitar1602 7 лет назад

samy is my hero

@jamespatti6082 8 лет назад

Fascinating... I wonder if Master lock has seen your videos? Have you ever been contacted by them? Keep the videos coming! cool stuff...

@samykamkar 8 лет назад

+James Patti Thanks! I have not, however fortunately users can simply upgrade to a more secure lock.

@LouisEmery Год назад

15:33 If you already have the lock opened up you can determine the number offset empirically: just turn the knob till the notch position is seen to match up with the lever stop. I read some of the comments, which now I realize pointed out the same.

@dwinvest8331 5 лет назад

Epic Breakdown.

@rubixman7x7 8 лет назад

Wouldn't the little bulging things also mean that the second number can't be within the 2 closest numbers from the first number?

@sterloan3737 6 лет назад

Awesome video

@AntiochSanders 9 лет назад

Could you have just turned the lock to see the digit difference instead of doing those calculations?

@lukie80de 9 лет назад

Thanks for the video. Question: If all three discs are identical in every lock (are they?): Wouldn't it be sufficient to only know the first position and then always rotate the two fixed known differences which arise from the always same three discs? For example: Find 1st position CW then always rotate 340° CCW and then always rotate 280° CW?

@junyangtan9962 7 лет назад

This video cured my cancer. Thank you sammy

@samykamkar 7 лет назад

You...you're welcome...I think

@jakemcmillian 8 лет назад

What determines the combination from one lock to another? I thought it would be determined by the way the dials are stamped, but the first and second number dials look identical. It also doesn't seem to be determined by how the dials as assembled. Could you possibly change the combination on your cut open lock? It looks like Master could fix theses vulnerabilities by adding a second line to manufacture 1st digit discs (without tabs on the back) and retool the grooves to match the width of the channel.