Skip to main content

DIY Red Team Tools - Under Door Tool

I keep hand written notes on everything I find that is useful. This is part of a series of blog posts on making your own DIY red team tools from my notes. Obviously you should only use these tools where you are allowed to use these tools, and you should take care when making or using any tools. These are just my notes on what worked for me, your mileage may very, etc.

Under Door Tool

The under door tool is useful when you are on the wrong side of a door that has a door handle which unlocks it. These doors open so easily to allow people to escape in case of a fire and a power outage. Examples of these doors are found throughout commercial properties but are not normally found in domestic properties. The doors tend to look something like this.


The under door tool can easily bypass doors in under a minute, but they are bulky to carry and can be hard to source locally. A commercial UDT is likely to cost about £60.00 shipped, but an improvised one could easily be made for less than £10.00 in materials.

You are going to need:

Materials:

1800mm of 4mm steel

1500mm of 50lbs kevlar cord (or similar)

 35mm diameter ring (or similar)

The cord can be any strong cord of about 1mm diameter. An inner strand of 550 paracord will work.

Tools:

A way of bending the steel: a pipe bender, tubing to act as a handle, or be really strong and use pliers.... 

Blowtorch or gas stove.

Metal file.

Metal saw (optional)

Method

Hack saw or file the steel to length.

Bend to shape.

Round the working end and put a 20' bend about 2cm from the working end. This will be what stops the tool from sliding off the handle.

About 10cm from the working end create a 90' bend in the same direction as the first bend. Do this slowly, there is not need for this to be a tight bend. Bending round something with a 20-50mm diameter will help with this.

At the other end, create a "handle" that is about 150mm long.

About 150mm from the handle create a large curve bending round about 120% around a circle of about 200mm in diameter.

Heat treat bends. (optional)

Heat treat everything once it is has been shaped to help it hold it's shape. You don't need to do this if you are only using the tool a couple of times but if you plan to reuse it a bunch, then it's really recommended.

Heat treating can be done by heating with a blowtorch or over a stove until cherry red and then quenching in cold water. Repeat three times.

Add the large bend in the main shaft and the slight back bend about 100mm from the top of the shaft. This is how you adjust the height of the tool to match the door you are attacking.

Attach cord.

Use the file to put two notches in the working end to hold the cord. One should be 5-10mm from the rounded end, and the other should be about 20mm from the working end.

Attach the cord and the ring. I recommend using a snell knot, but any knot that works will do.



This is a picture of the finished under door tool.


The under door tool can be bend round to fit into a large backpack.

Usage

Here is a better video than I could make about how to use the UDT.

 

If there isn't enough of a gap under the door to use the UDT, an airwedge can usually lift most doors enough to allow the tool to work.



Comments

Post a Comment

Popular posts from this blog

Snagging creds with Raspberry Pi Zero and Responder

So this is not all my own original work. This is a bringing together of the ethernet gadget tutorial by lady ada at adafruit and the beautiful work by Mubix at room362 which uses Laurent Gaffie's from SpiderLabs responder.py scripts. I'm still using Mubix's recipe of USB Ethernet + DHCP + Responder == Creds but here we are using a £4.00 Raspberry Pi Zero instead of the USB armoury or the HAK5 LAN turtle. Both are awesome products. Please note that this only works on the RPi Zero. Other RPi's will not work!   1.0 Setup the the RPi Zero for Ethernet over USB Download and install the latest Jessie Lite from here onto an SD Card. Pop the card out of the card reader and re-insert it to mount it. Take your favorite text editor and edit the following two files in the boot partition. config.txt Go to the bottom and add dtoverlay=dwc2 as the last line: Save the config.txt file. cmdline.txt After rootwait (the last word on the first line) add a spa...
3 comments
Read more

HoneyPot WarGames - The Hackers Dictionary

Every year security companies are coming up with the “worst passwords” based on breached credentials found on in the murkier parts of the internet. Every year people seem surprised that “123456” is a terrible password and people are still using it. Passwords often get rated by how quickly the could be “cracked”. The length of time for cracking passwords in the real world varies wildly according the the context and the numbers are often confusing. NordPass recently published their list of most common passwords and claimed that the third most popular password was “picture1” and it would take 3 hours to crack. If that’s referring to offline password cracking then we should have a whip-round to upgrade the hackers hardware because a password like that should take seconds to crack. When hackers try to brute force their way into an account online they have to try lots of different password combinations until they get in, or just give up. This takes a lot of time so hackers spend time optimiz...
Post a Comment
Read more

DIY RedTeam Bypass Tools - Wallet Jim

I keep hand written notes on everything I find that is useful. This is part of a series of blog posts on making your own DIY red team tools from my notes. Obviously you should only use these tools where you are allowed to use these tools, and you should take care when making or using any tools. These are just my notes on what worked for me, your mileage may very, etc. Wallet Sized Slim Jim Tool The slim jim or shove tool is for "latching loiding". It works by reaching into the gap between the door and the frame to push or pull on the latch. This won't work on a properly fitted lock which use a deadlatch or dead locking plunger. Many deadlatch locks are not properly fitted or badly maintained so it's always worth a try. The term loiding comes from celluloid used in filmstrips which was the material originally used in some of these attacks. This jim is very small and sized to fit in a wallet. You are going to need: Materials: This is made from a thin steel ruler l...
Post a Comment
Read more