Skip to main content

Travel & Field Operations Guide

Physical penetration testers and red team consultants frequently travel with specialized tools (picks, tensioners, under-door tools, bypass wires, Proxmarks, and electronic implants). Navigating airport security, regional laws, and on-site law enforcement interactions requires rigorous operational preparation.

Flying with Lockpicks & Bypass Gear (TSA Regulations)​

In the United States, commercial air travel security is governed by the Transportation Security Administration (TSA) under Title 49 of the Code of Federal Regulations (49 CFR § 1540.111).

Carry-On vs. Checked Luggage Rules​

Equipment CategoryCarry-On Permitted?Checked Baggage Permitted?TSA Regulatory Citation & Guidance
Lock Picks & Tension BarsYes (if under 7 inches)YesStandard picks are classified as hand tools; permitted if under 7" in length
Hand Tools (< 7 inches)YesYesScrewdrivers, hex keys, small wrenches under 7" from pivot/tip
Prybars & HalligansNoYesProhibited in carry-on regardless of length; must be checked
Knives & Shove KnivesNoYesAny bladed bypass tool (mica knives, shove knives) must be checked
Under-Door Tools (UDT)No (due to length)YesRigid wire tools exceed the 7-inch limit; pack disassembled in checked luggage
Lithium Batteries & SDRsYes (Required)No (Loose lithium)Spare lithium battery packs, Proxmarks, laptops must travel in carry-on

The "Officer Discretion" Reality​

Under TSA screening guidelines, individual Transportation Security Officers (TSOs) possess final discretion at the checkpoint:

"The final decision rests with the TSA officer on whether an item is allowed through the checkpoint."

If a TSO perceives tension wrenches or pick profiles as dangerous items or weapon components, they can confiscate them regardless of CFR length rules. For this reason, placing all non-electronic mechanical bypass tools in sturdy checked baggage is strongly recommended.

State Laws & "Burglary Tool" Statutes​

In the vast majority of US states, the mere possession of lock picks and bypass tools is entirely lawful. However, statutory definitions fall into two primary legal categories:

1. Intent-Based States (Majority Rule)​

In most states (e.g., California, New York, Texas, Florida), possessing lock picks is completely legal. To sustain a criminal charge for "Possession of Burglary Tools," the prosecution must prove mens rea (criminal intent)—meaning tools were carried with the proven intent to commit a burglary or trespass.

2. Prima Facie / Rebuttable Presumption States​

In a minority of states (notably Mississippi, Nevada, Ohio, and Virginia), statutory language establishes that possession of lock picking tools by an unlicensed individual can be treated as prima facie evidence of intent:

  • While holding a valid Letter of Authorization from the property owner rebuts this presumption, carrying tools in these jurisdictions requires heightened operational caution and strict adherence to client documentation.

Operational Documentation & Letter of Authorization (LoA)​

When operating in the field, every team member must carry physical and digital copies of the Letter of Authorization (LoA) (frequently referred to as the "Get Out of Jail Free" letter).

Mandatory Elements of a Valid LoA​

  1. Client Identity: Full legal corporate name, headquarters address, and signature of a verified officer (e.g., VP of Security, Chief Information Security Officer, or Corporate Counsel).
  2. Consulting Firm & Assessor Names: Full legal names and government-issued ID numbers of every authorized field assessor.
  3. Specific Facility Scope: Exact physical addresses, boundary parameters, and excluded target zones (e.g., data center raised floor excluded; outer perimeter and mechanical rooms included).
  4. Authorized Methodologies: Explicit language authorizing non-destructive mechanical bypass, lock manipulation, electronic access exploitation, and tailgating.
  5. Effective Dates & Time Windows: Strict start date/time and end date/time.
  6. 24/7 Verification Contacts: At least two primary client liaisons with verified 24-hour phone numbers who can confirm the assessment immediately to law enforcement.

Law Enforcement & Security Engagement Protocols​

If confronted by armed security, building management, or local law enforcement during a covert assessment:

1. Freeze & Comply ---> Keep hands clearly visible; never make sudden movements
         |
2. Clear De-escalation -> Calmly state: "We are security contractors conducting a test"
         |
3. Present Documents --> Provide Government Photo ID and physical Letter of Authorization
         |
4. Facilitate Call ----> Request the officer contact the designated 24/7 client liaison
  • Hands Visible: Immediately stop all tool manipulation. Keep hands away from pockets or gear bags.
  • De-escalation: Remain respectful, composed, and cooperative. Never attempt to run, argue, or bluff your way out once physically detained.
  • Immediate Presentation: Present your government photo ID and the printed Letter of Authorization. Explain clearly that you are conducting an authorized security evaluation under contract.
  • Client Liaison Verification: Provide the direct phone numbers of the client's CISO or Security Director so the officer can verify the operation immediately.

Authoritative Literature & Legal Compendiums​