There have been no public unwrappers for 9ir2 and lower available on the internet for a long time. There were a number of unwrappers available at some points in the past from Russia, China and others. These all disappeared a long time ago and at least one of them, if you downloaded it would infect your PC.
Unwrapping 10g and higher is much simpler than pre 10g as the process is a combination of a substitution cypher, unix compress and base64. There are plenty of free 10g and higher unwrapper tools available.
I first created an unwrapper for PL/SQL over 20 years ago and I have spoken and written about unwrapping PL/SQL many times and I also spoke at Black Hat in las Vegas in 2006 about the same subject. Some examples of some posts and a link to my talk at Black Hat:
- Unwrapping PL/SQL - posted in December 2009
- SQL to show Oracle DIANA, Attributes and more
- Unwrapping PL/SQL Source Code and Proving the Code is Recovered - Posted in 2022 to prove PL/SQL code is recoverable
- Unwrapping PL/SQL - My Black Hat 2006 presentation
- 10g and 11g PL/SQL Unwrapper source code available - Posted in 2010
- PL/SQL Machine Code Trace - event 10928 Showing PL/SQL VM P-code
- PL/SQL, AST, DIANA, Attributes and IDL - extremely detailed post on PL/SQL internals
The unwrapper for 9i and lower released by Cameron is a massive peice of work and is GPL and released on his GitHub - PL/SQL Unwrapper. Have a look and if you still want me to unwrap lost source code then please contact me as our unwrapper is written in C and runs on the command line and does not need access to the database or installing the PL/SQL code in another database or the unwrapper to be installed in the database.
#oracleace #sym_42 #oracle #plsql #unwrap #reverse #engineering #security
