I've devised a new attack for cracking any that simplifies the process and reduces the amount of work down to only 8 combinations. If you're directly between two digits such as 3 and 4, release the shackle and turn the dial left further until you're into the next locked groove. However, if the dial is between two half digits e. Rotate the dial to the right several more times to ensure you're feeling resistance at the same exact location. If the resistance begins at a half number, such as 14. We now have 20 possible combos, but we'll reduce this further. Otherwise, click the first digit. Test them all until one works with the standard instructions below. Stop at First Digit. Not working for me at all. Tried a variety of different stopping points for the second step, because mine always stops between two whole numbers, until I get to 12. Found this master lock in the parking lot of my old apartment complex like 2 years ago... Reply Hi Samy, Same as others here, I have an older lock from maybe 5-6 years ago, serial on bottom reads 1211CF. The dial locks at 2-3, so I skip. The first locked position then is 5. Next, it locks between 9 and 9. Then the next locked position is 12. Kicker here is that I do know the combination on this lock, as it was never used and still has the sticker. Happy to work with you on this. Would like to help amend your code to make it universal if possible. Second stop is 5. Third stop is 8. As I turn some more looking for the Second Digit, it's already passing 11. Next lock position is ether. Reply Doesn't work for me. I know the combination and it gets the first and second numbers correct but not the third. The only options it gives for the third are 10 and 30 but the actual is 14. I know the first and second locked positions are correct and both are under 11 and the resistant location is either 4 or 4. It did just not work for my locks. Instead I used a combination of Samy's and your explanation. Then I calculated the magic number from the first number according to your explanation and based on that identified the 8 candidates for 2nd number.. Reply I'd love to know the math too.. The 3rd number was wrong, but easily found manually, the 1st number seems to be generated based on the resistance number, and even though it worked it wasn't the right number only 1 digit off so maybe human error or glitch in the matrix but regardless, 1 digit discrepancy still works in most cases. And my 2nd number was also only 1 digit off.. This all makes me REALLY want this formula, because I feel like with a little tweaks you can have a definitive 3rd, 1st, and maybe narrow down the 2nd. It all makes me wanna grab a few more locks from the store to test some theories and equations If you used your formula, and compared your results with a well known matrix for master, one could perfect this Reply I only have one number between 0 and 11. So I wasn't able to use your formula. Since it is a rotary dial I decide to try between 30 and 0 and I was able to get 35 and 38 with the resistance at 38. I added 10 in modulus 40 to each number and input the number into the calculator. The calculated result was then reconverted to get the correct dial number and on the second trial the lock opened. My lock was 3,33 and 15 Amazing it works! But you need to change your calculator formula if somebody like me doesn't have two numbers between 0 and 11 exclusive. Reply I'm running in to some similar problems. My combination is 31-13-07 I have locked positions at 0, 7, 10. You are not too clear on that point. Next my resistance is at 12. Doing the old fashioned manner of reducing to 100 or 80 combinations does produce all of my numbers. Reply Hi Samy, first of all, I got my lock open - so thanks! It did take me a few more than eight tries though so I thought I'd give some feedback in case you're interested or someone else finds it helpful. However, my first digit is 25. In fact, the resistant location is a little over 19, but closer to 19 than 19. I estimate it's about 19. Instead of rounding up and adding 5, maybe add the offset 5. I discount the 4. But my last digit is 25! The locking range around 25 is a bit more than at 4-5, so that it does cross 25 24. So it's correct to discount a range between two whole numbers, but this discounts only that particular range, 4-5, but not also 14-15, etc. I got it by the traditional advice of writing down all 12 midpoints, then discounting the. Reply I tried this several times with different master locks and it worked as outlined I am used to using the 100 try method , but I came across a lock today that it would not work on. It's a master lock with a red dial and keyhole in the back. The numbers on the dial do not line up the same way they do on a standard master. I could not even do the 100 try method as I could not isolate the third digit. For this method however, I came close, but could not feel the Resistant Location. Maybe I'm simply not dextrous enough to understand how much pressure to apply to the latch. I simply don't get it. Can anyone help me with this part of it? My hands or my brain or a combination of the two simply don't get it. Reply That's a load of nonsense. Do you see the dozens of people who have said it isn't working? It's not working for me, either. But I don't suspect Samy is going to reimburse us all for the lost time. It's nice that he's doing this kind of thing -- he's a good hacker. I like his little programmed device, too. But if he hasn't checked with strong confidence, he shouldn't release it. He needs to do more work before publishing unreliable reports, and it's irresponsible to publish something like this without checking on all of the problems and making revisions. He appears to have started trying a year ago, then he gave up. Instead of unpublishing this, he's left it up for thousands to try and fail at. Reply Discovered a lock I haven't seen in years, of course, combo was long gone. I tried the technique, fully believing it was full of crap. The first and last numbers did NOT seem familiar.... I totally felt like I did the whole instructions thing wrong because nothing really felt for sure like it was truly resistant, but anyway... Reply So trying this with a generic store brand Ace hardware and not succeeding... Seems the first locked position is actually around 0 can jimmy between 0 and 1. On another site there's a thing about finding 12 locked position going counterclockwise.. I've tried multiple different approaches to this and cannot crack this brand. Is it different for generic? Reply Sammy I am truly amazed by how smart you are. I looked into your other stuff like phreaked out and your other articles. I want to start learning about these things. I'm somewhat tech savy but nothing like your status. I'm not asking to learn how to hack because I know it's not as simple as that. It's a bit more specific it looks like. Where do I start? How long did it take you to be as wise as you are with all your stuff? I mean, you built your own freakin machine and for that I envy you. Any tips , guides, or words of wisdom would be greatly appreciated! Reply Didn't work for me. I found the first locked position at 2. The resistance point is around 36. When I input the numbers into your calculator, the combinations don't work. Is it possible that I have had determined the locked points inaccurately? Is there any other tricks that I can try? Thanks Reply I have 2 locks I found in a storage box that I had lost the combination to. My first try with this hack worked immediately. The second lock, was a bit more challenging. I thought 0 was one of my locked numbers, but no! I also missed the. This gave me a 40 as a possible third number. Impossible on this lock. I just kept at it until I had the accurate numbers to input in the calculator. So my advice, if you don't get a solution, is go back to square one and start over. Reply After an hour of going through the process, I finally got frustrated enough to rip off the back of my padlock and align the pins by eye. Bet this would have worked if my last number weren't 0. But, alas, it was, and as far as I can tell, there's no way to get '0' as the final digit through the algorithm Reply Worked great on the first lock. On the second lock I had to combine it with the 100 tries algorithm as the resistance point returns an incorrect number. I feel resistance at 20 - must have done this 50 times, but the first number is a 6 so resistance should have been at 1. I feel absolutely no resistance anywhere near 1. Reply While finding the resistance point is most difficult mine had two and was off by 2 places. This method helped me find the true combo and eliminate too many options. I used this technique with another technique to eliminate possibilities and resolve which was the true resistance point. I now have a working combo lock again after 12 years of being stuck on my gym bag. Reply I find that with the type of combination lock on the video the best method to use is to simply hold the lock in one hand with your finger in the loop and push the loop outwards as hard as you can. Turn the dial until you feel the loop pop, then turn the dial the other way, then the original way, 3 pops and it's done. This technique works for virtually all combination locks. I do find the concept interesting, but why settle for eight tries when you can do it in one or two! Reply This worked except that my second locked position was 17, and it was really about 16. My first locked position was actually 0 but that didn't work maybe because my resistance was also 0, or maybe just because 0 isn't allowed I don't know. So I then had to move on to the next two numbers, 10 and 17. Reply Doesn't provide anything close to my combo. I haven't been able to figure out an old lock despite doing all the steps multiple times so I tried it on a lock that I know the combo for. The combo is 14-32-6 with the first two locked positions at 6 then 9. None of the possibilities come close to the combination. Then when I put in the resistance location which is quite obviously 31, there are still no combo options that come close. Reply and everything else works. Create a list of ~ 4 possible starting numbers, 2 possible final numbers, and 8 middle numbers based off of your final number remainder 4, +2. This is the surefire way to crack one of these locks. If this doesn't work, make sure that you find the first number by TURNING COUNTERCLOCKWISE!
