-
Why do V$session.program and V$session.module don't match
Hi,
I'm trying to break my security program before I deploy it to production and I was able to change the executable SQLPLUS.exe to anytool.exe. When I invoked anytool.exe and looked at V$session, program shows anytool.exe, but module still shows SQLPlus. How can I make SqlPlus in module show anytool.exe in program? (I hope the answer is you cannot.)
Thanks,
Leonard
leonard905
leonard905@yahoo.com
-
if youi rename sqlplus.exe to anytool.exe program will have anytool.exe and module will still have SQLPlus
-
very easy to change
Code:
select module from v$session;
MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS
KTSJ
SQL*Plus
exec dbms_application_info.SET_MODULE('TOAD.EXE', 'DROP DATABASE');
elect module from v$session;
MODULE
------------------------------------------------
STREAMS
STREAMS
KTSJ
STREAMS
KTSJ
TOAD.EXE
-
Thanks pando. How about Terminal? Can it be manipulated anyhow?
Leonard
leonard905
leonard905@yahoo.com
-
Are you planning something illegal man?
First, how to hack Oracle password.
Now, how to disguise yourself.
Don't want to be an accessory in whatever you are planning LOL
Pablo (Paul) Berzukov
Author of Understanding Database Administration available at amazon and other bookstores.
Disclaimer: Advice is provided to the best of my knowledge but no implicit or explicit warranties are provided. Since the advisor explicitly encourages testing any and all suggestions on a test non-production environment advisor should not held liable or responsible for any actions taken based on the given advice.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|