Skip to main content

DIY RedTeam Bypass Tools - Wallet Jim

I keep hand written notes on everything I find that is useful. This is part of a series of blog posts on making your own DIY red team tools from my notes. Obviously you should only use these tools where you are allowed to use these tools, and you should take care when making or using any tools. These are just my notes on what worked for me, your mileage may very, etc.

Wallet Sized Slim Jim Tool

The slim jim or shove tool is for "latching loiding". It works by reaching into the gap between the door and the frame to push or pull on the latch. This won't work on a properly fitted lock which use a deadlatch or dead locking plunger. Many deadlatch locks are not properly fitted or badly maintained so it's always worth a try.


The term loiding comes from celluloid used in filmstrips which was the material originally used in some of these attacks.

This jim is very small and sized to fit in a wallet.

You are going to need:

Materials:

This is made from a thin steel ruler like you can find from any stationary supplier.

Tools:

A metal file (ideally one straight and one round)

Metal saw (optional)

Fine grit sand paper (optional)

Method

Starting just over 10 mm from the working end, file straight down to about halfway through the ruler. Start about 35mm from the end and cut down at 45° towards the first cut to the same depth. Remove the material in between and smooth all the edges. Cut the ruler so you have a piece just over 85mm long. File all the of edges smooth and rounded.



This is a picture of the finished wallet slim jim.



Usage

The wallet slim jim can be used anywhere you can see the latch. You can either push with the flat end or pull with the hook. If the edges are smooth, it works very quietly and efficiently.

If the latch is protected by a deadlatch, pushing or pulling the door may cause the deadlatch to disengage if the door isn't perfectly fitted.

If the latch it blocked by a dead locking plunger, you might be able to use an airwedge to pust the dorr far enough away from the frame to disengage the plunger.

 If you can't see the latch, this tool probably won't be able to reach it - you are going to need a mica sheet or a door latch needle.

Labels:

Comments

Post a Comment

Popular posts from this blog

Snagging creds with Raspberry Pi Zero and Responder

So this is not all my own original work. This is a bringing together of the ethernet gadget tutorial by lady ada at adafruit and the beautiful work by Mubix at room362 which uses Laurent Gaffie's from SpiderLabs responder.py scripts. I'm still using Mubix's recipe of USB Ethernet + DHCP + Responder == Creds but here we are using a £4.00 Raspberry Pi Zero instead of the USB armoury or the HAK5 LAN turtle. Both are awesome products. Please note that this only works on the RPi Zero. Other RPi's will not work!   1.0 Setup the the RPi Zero for Ethernet over USB Download and install the latest Jessie Lite from here onto an SD Card. Pop the card out of the card reader and re-insert it to mount it. Take your favorite text editor and edit the following two files in the boot partition. config.txt Go to the bottom and add dtoverlay=dwc2 as the last line: Save the config.txt file. cmdline.txt After rootwait (the last word on the first line) add a spa
3 comments
Read more

Munging Passwords

Password munging is the art of changing a word that is easy to remember until it becomes a strong password. This is how most people make up passwords. Munge stands for M odify U ntil N ot G uessed E asily. The trouble is that it doesn't work very well. We can guess the modifications. Password selection. Take the average office worker that is told that it's time to change their password and come up with a new one. They have just been on holiday to New York with their family and so following common advice they choose that as their password. newyork No! They are told they must include capital letters NewYork No! They are told they must include numbers N3wY0rk No! They are told they must include a special character N3wY0rk! There, now that's a password that meets security requirements and our office worker can get on with their actual job instead of playing with passwords. Scripting similar munges There are a number of ways that they could munge the
Post a Comment
Read more

Anatomy of a phishing campaign

This is the story of a phishing email that came across my desk. It's good to take a look at what the bad guys are doing sometimes. It's often not rocket science but it's handy to keep an eye on the simple techniques used. And if this isn't your day job you probably don't get forwarded a huge number of phishing emails, malware to analyse or dodgy sites to investigate. In fact hopefully you do your best to avoid all of those things. The Attack Chain So this particular phishing campaign started as many others do with a simple phishing email. It's not an aggressive email, it's not selling itself too hard, no spelling mistakes, no funny looking URLs and it's pretty simple. There's only one link to click on. Just a quick note here about clicking on links in nefarious emails. Don't do it unless you are ready to. This link could trigger some malware, it could be unique to the targeted email (so the attacker knows the email address is valid
Post a Comment
Read more