Why do V$session.program and V$session.module don't match

Hi,

I'm trying to break my security program before I deploy it to production and I was able to change the executable SQLPLUS.exe to anytool.exe. When I invoked anytool.exe and looked at V$session, program shows anytool.exe, but module still shows SQLPlus. How can I make SqlPlus in module show anytool.exe in program? (I hope the answer is you cannot.)

Thanks,
Leonard

if youi rename sqlplus.exe to anytool.exe program will have anytool.exe and module will still have SQLPlus

very easy to change

Code:

---


select module from v$session;

MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS

KTSJ
SQL*Plus


exec dbms_application_info.SET_MODULE('TOAD.EXE', 'DROP DATABASE');

elect module from v$session;

MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS

KTSJ
TOAD.EXE

---

Thanks pando. How about Terminal? Can it be manipulated anyhow?

Leonard

Are you planning something illegal man?

First, how to hack Oracle password.
Now, how to disguise yourself.

Don't want to be an accessory in whatever you are planning LOL