this weekend my partner and I are
attending Defcon and I decided there's
no better way to spend some down time
than to try to find some non-destructive
exploits for my suitcase currently here
I have an away luggage suitcase and on
it it features a TSA approved
combination lock the features of the
lock are a TSA keyway override and a
three-digit combination lock as well as
a button to reprogram the lock when the
combination is entered and the bar is
pulled to the side the lock will open
releasing the zipper if it is in the
wrong combination
V bar will not move and the zipper will
not release
now looking at this the first attack
phase that I tried was to go for the QA
unfortunately for me I didn't bring any
tools that would allow for me to have
enough movement and the key way to
effectively pick it
the good news is is that the biggest
exploit for the suitcase is the fact
that it is TSA approved if we see here
it is a
ts8007 lock which means that if I have a
tsa-007 key which is readily available
for many vendors including Amazon I can
simply insert it turn it
and my suitcase is now open
now if we wanted to assume that I didn't
have access to this key and the keyway
is too restrictive the question becomes
how do we open it without knowing the
combination
a very simple answer is you could
potentially brute force it if you had
enough time with the suitcase but let's
assume that we don't have the time for
that
the way this Lock Works is there are
slots cut into these discs when the
combination is set and it allows the
Locking bar to fall into place that
locking bar happens to be directly
behind all of these disks and the
position of that right now is that means
that the Locking bar
will be falling on to number five in the
back of the lock now while I was looking
and investigating this lock with my
Jeweler's loop I was able to move the
discs to either side
and I was able to discover that that
gate is easily viewable and is quite
frankly wide open
so
an attack that you can do is you can
scroll through and using a feeler gauge
like The Sparrows decoder you can feel
and try to find that gate and eventually
you will find a small piece where your
tool slips into and that allows you to
decide that this is the number that the
gate is attached to
now we can follow this procedure for all
of them and then rotate these numbers by
five and we will get our combination
so let's go ahead and actually do this
I'm going to start
by locking this up
and I'm going to look away
as I mix all these numbers
as random as possible and then I set the
combination and I'll go ahead and
back in
so now I currently have no idea what the
combination might be and I'm going to
start by decoding so I take my feeler
gauge I feel for that number
and I'm feeling nothing
and I just go ahead and I'm going to do
this for each of the numbers
and it looks like
potentially it might be three
now I'm going to go for the next number
and it looks like it's going to be six
and then three again now if I simply add
five to each of these one two three four
five
should be our combination
that was fun