Why do V$session.program and V$session.module don't match

[leonard905]

Hi,

I'm trying to break my security program before I deploy it to production and I was able to change the executable SQLPLUS.exe to anytool.exe. When I invoked anytool.exe and looked at V$session, program shows anytool.exe, but module still shows SQLPlus. How can I make SqlPlus in module show anytool.exe in program? (I hope the answer is you cannot.)

Thanks,
Leonard

[davey23uk]

if youi rename sqlplus.exe to anytool.exe program will have anytool.exe and module will still have SQLPlus

[pando]

very easy to change

select module from v$session;

MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS

KTSJ
SQL*Plus


exec dbms_application_info.SET_MODULE('TOAD.EXE', 'DROP DATABASE');

elect module from v$session;

MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS

KTSJ
TOAD.EXE

[leonard905]

Thanks pando. How about Terminal? Can it be manipulated anyhow?

Leonard

[PAVB]

Are you planning something illegal man?

First, how to hack Oracle password.
Now, how to disguise yourself.

Don't want to be an accessory in whatever you are planning LOL