Sentry Safe Bypass Tool to reset lost code

A security researcher by the name of Etienne Sellan discovered a vulnerability in Sentry Safe/Master Lock digital fire safes that allows you to send a new code to the safe without requiring any code. I was able to produce this tool by following his github
github.com/H4ckd4ddy/bypass-s...
He also posted code to fix the issue.
All credit goes to him!
This is handy for Locksmiths to reset a customers safe code if forgotten!
UPDATE: see updated tool here: • Sentry Safe Bypass too...

[@unknownb6354]

I’m really amazed!!

[@Siulbarrettmills1]

I have two versions of this. One from Serepick and one I downloaded to my flipper zero. Not bad sir

[@HollowBrooder]

I’m having the same issue as you in the video, it doesn’t really work consistently. I’ve only got it to reset the code once. Is there a trick to making the connections better on the safe?

[@thewhittierlocksmith121]

Just needs a sturdy connection, I’m working on a device that you can plug the connector from safe into the tool instead of probes going into the connector.

[@HollowBrooder]

I was thinking of something similar. Will be interested to see what you come up with.

[@rmsg7504]

Nice!

[@dazaessox]

nice little tool do you have the wiring connections for the chip
many thanks

[@thewhittierlocksmith121]

its on github github.com/H4ckd4ddy/bypass-sentry-safe
pin 1 is green wire, pin 7 is vcc, pin 8 is GRD and black wire

[@bvprecisionrifle]

Do you have to flash data to the chip before builidng the tool

[@thewhittierlocksmith121]

@@bvprecisionrifle yes

[@thewhittierlocksmith121]

@@bvprecisionrifle yes. You use the code on github and flash to the chip. Then use the pinout to determine the soldering points

[@RocketSurgeon540]

@@thewhittierlocksmith121 Is the green wire on the TX pin of the Atmega328?

[@jamesmillard8239]

I find it much easier to jumper between the two legs of the U2 transistor. This automatically triggers the open and resets the safe to factory default.

[@jesshaupt7509]

Could you explain more about this?

[@jamesmillard8239]

@@jesshaupt7509 with a little bit of circuit analysis you can find the transistor that triggers the solenoid. On three of the safes that I have had experience with it is labeled U2. If you jumper acrost the leg its supplies power to the solenoid that is needed to trigger it. It will open the safe however if you do not have a code reset button inside he will not be able to reprogram.

[@RedneckPunk]

I jumpered it and not happening

[@letsgetto1millwithoutvids]

or use a flipper zero

[@thewhittierlocksmith121]

yea you can, the source code is the same- same project

[@Siulbarrettmills1]

I have two versions of this. One from Serepick and one I downloaded to my flipper zero. Not bad sir

[@kendricoldenberg7920]

Can you share how you do this on the flipper zero? Having issues with mine

[@fierymonkey]

same im also having problem as well