Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
Cookie Policy:We only use essential cookies on small sections of this website. For details see here.

Welcome, Guest. Please Login.
Nov 19th, 2017, 4:32am
News: Welcome to Pete Finnigan's Oracle security forum
Home | Help | Search | Members | Login
   Pete Finnigan's Oracle Security Forum
   Oracle Security
   Oracle Security
(Moderator: Pete Finnigan)
   Unwrapping PL/SQL
« Previous topic | Next topic »
Pages: 1 2  Reply | Notify of replies | Send Topic | Print
   Author  Topic: Unwrapping PL/SQL  (Read 21558 times)
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Unwrapping PL/SQL
« Reply #15 on: Mar 8th, 2007, 9:00am »
Quote | Modify

Hi,
 
The presentation code is a proof of concept only designed to unwrap a very simple procedure whose DIANA is stored in the IDL$ tables. There is limited access to DIANA in the IDL$ tables and as stated in the paper the DIANA for packages is not stored. To unwrap packages you would need to write a complete unwrapper.
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
anenthan
PeteFinnigan.com Newbie
*





   
View Profile | WWW |

Gender: male
Posts: 1
Re: Unwrapping PL/SQL
« Reply #16 on: Aug 29th, 2007, 12:01pm »
Quote | Modify

Pete,  
 
I have a problem, when i execute EXEC SYS.DUMPDIANA.DUMP(aname => 'UL_BOOKING_REPORT') i get the following error.
ERROR at line 1:
ORA-06510: PL/SQL: unhandled user-defined exception
ORA-06512: at "SYS.DUMPDIANA", line 67
ORA-06512: at "SYS.DUMPDIANA", line 84
ORA-06512: at line 1
 
These also dont give proper result. They give the following  
 
-
$$$ s_subpNotFound
 
 
EXEC SYS.PSTUB('UL_BOOKING_REPORT',NULL,:A,:B);
EXEC SYS.SUBPTXT('UL_BOOKING_REPORT',NULL,NULL,:A);
 
 
I did dump the datafile with proper no from UB2$ (Got it from running rowid.sql).  
 
Pls help this procedure was created in oracle 8i.
 
Best Regards
 
Anenthan
« Last Edit: Aug 29th, 2007, 12:14pm by anenthan » IP Logged

S.S.Anenthan
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Unwrapping PL/SQL
« Reply #17 on: Aug 29th, 2007, 2:48pm »
Quote | Modify

is it a procedure or package or package body? - if its a package body then there is no DIANA stored.  
 
I suspect your issue is that you are running the dumpdiana.dump not as the owner of the pl/sql yoy are trying to dump. if you are then add the usr=>'username' to the get_diana call in dump - you cannot pass this in as it defaults to usr=>user. this applies if you call the dump procedure. The other simpler approach is to call sys.dumpdian.get_diana directly and pass in the user name.
 
hth
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
ronbie
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Posts: 1
Re: Unwrapping PL/SQL
« Reply #18 on: Oct 15th, 2007, 11:36am »
Quote | Modify

hi pete,
i have this result with use unwrap_r:
 
Start up
CREATE OR REPLACE
**** ERROR ****
**** ERROR ****
IS BEGIN
**** ERROR ****
**** ERROR ****
**** ERROR ****
**** ERROR ****
END;
/
 
env. oracle 9.2.0.5
 
Any suggestion ?
 
Thanks
IP Logged
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Unwrapping PL/SQL
« Reply #19 on: Oct 15th, 2007, 3:19pm »
Quote | Modify

Hi,
 
What are you trying to unwrap with this sample code? - the code is from my Blackhat presentation and is a proof of concept only to show how unwrapping works in 9i and lower. It was written to unwrap a simple procedure like http://www.petefinnigan.com/aa.sql only.
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
shijobaby
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Posts: 1
Re: Unwrapping PL/SQL
« Reply #20 on: Dec 4th, 2009, 8:24am »
Quote | Modify

http://oracleerrormsging.blogspot.com/2009/12/internal-error-while-parsi ng-spatial.html
IP Logged
sherry1
PeteFinnigan.com Newbie
*



I love YaBB 1G - SP1!

   
View Profile |

Posts: 1
Re: Unwrapping PL/SQL
« Reply #21 on: May 20th, 2010, 11:14am »
Quote | Modify

I really understand the write up and i know you delibrated much more on the process for Oracle 9i and bellow  with respect to DIANA and m code. But I have an issue in house. I have a package that we wrapped  in Oracle 10g. What the package does is to send notification to our numerious customers once a trasaction takes place in their account. We need to expand the scope of this package and we are stucked. The source code cannotbe trace again. Wehave the .plb  only. We dont want to re invent the wheel as it took some time to get to that position . I really need your advice in this case. what can we do.
IP Logged

network+ exam
Marcel-Jan
PeteFinnigan.com Junior Member
**






   
View Profile | WWW |

Gender: male
Posts: 83
Re: Unwrapping PL/SQL
« Reply #22 on: Aug 10th, 2010, 9:39am »
Quote | Modify

If you want to learn unwrapping PL/SQL, check Pete's library of white papers. Like this document: https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf
IP Logged
Pages: 1 2  Reply | Notify of replies | Send Topic | Print

« Previous topic | Next topic »

Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board