CAS-003 · Question #538
An external red team member conducts a penetration test, attempting to gain physical access to a large organization's server room in a branch office. During reconnaissance, the red team member sees…
The correct answer is D. Rake picking. Rake picking is the fastest non-destructive technique for opening standard pin tumbler locks because it simultaneously manipulates multiple pins without requiring a matching key blank.
Question
An external red team member conducts a penetration test, attempting to gain physical access to a large organization's server room in a branch office. During reconnaissance, the red team member sees a clearly marked door to the server room, located next to the lobby, with a tumbler lock. Which of the following is BEST for the red team member to bring on site to open the locked door as quickly as possible without causing significant damage?
Options
- AScrewdriver set
- BBump key
- CRFID duplicator
- DRake picking
How the community answered
(56 responses)- A2% (1)
- B2% (1)
- C4% (2)
- D93% (52)
Why each option
Rake picking is the fastest non-destructive technique for opening standard pin tumbler locks because it simultaneously manipulates multiple pins without requiring a matching key blank.
A screwdriver set is useful for removing exposed mounting hardware or manipulating certain latch mechanisms but cannot engage or set the internal pin stack of a tumbler lock.
A bump key can open pin tumbler locks but requires a key blank cut to the correct keyway profile for the specific target lock - a blank that may not be obtainable without prior knowledge of the lock brand and model.
An RFID duplicator captures and replays proximity card or fob signals for electronic access control systems and has no effect on a mechanical pin tumbler lock.
A rake pick uses a serrated or wavy profile to rapidly agitate multiple pin stacks in a pin tumbler lock, setting them to the shear line through a quick in-and-out raking motion that mimics the action of a key. This technique requires no prior knowledge of the specific key blank profile and can open a standard tumbler lock in seconds with no damage to the lock or surrounding door hardware. Rake picking is preferred over single-pin picking for speed and preferred over bump keys when a matched blank is unavailable, making it the most practical choice for quick, low-damage entry.
Concept tested: Physical penetration testing - lock bypass using rake picking
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.