Discussion:
I can't unwrap an old 9i wrapped function
Juan Carlos Reyes Pacheco
2018-06-29 16:02:42 UTC
Permalink
Please,I can't unwrap an old 9i wrapped function

currently there are tools for 10g onward wrapped procedures.
like https://www.codecrete.net/UnwrapIt/

for old wrapped there are OracleUnWrapper.exe from softdream but is too
expensive.

If someone know about a way to unwrap could you please send me :)

Thank you :)
Martin Berger
2018-06-29 17:03:49 UTC
Permalink
Unfortunately I don't have a tool, but this presentation by Pete Finnigan
will be a good starting point:
https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf

Hth,
berx
Post by Juan Carlos Reyes Pacheco
Please,I can't unwrap an old 9i wrapped function
currently there are tools for 10g onward wrapped procedures.
like https://www.codecrete.net/UnwrapIt/
for old wrapped there are OracleUnWrapper.exe from softdream but is too
expensive.
If someone know about a way to unwrap could you please send me :)
Thank you :)
Jeff Smith
2018-06-29 17:05:59 UTC
Permalink
I don’t suppose getting rid of your 9g instance and getting into 12c is a possibility?

 

Or even an 11gR2 XE database?

 

From: Martin Berger <***@gmail.com>
Sent: Friday, June 29, 2018 1:04 PM
To: Juan Carlos Reyes Pacheco <***@gmail.com>
Cc: Oracle-L Freelists <oracle-***@freelists.org>
Subject: Re: I can't unwrap an old 9i wrapped function

 

Unfortunately I don't have a tool, but this presentation by Pete Finnigan will be a good starting point: 

HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blackhat.com_presentations_bh-2Dusa-2D06_BH-2DUS-2D06-2DFinnigan.pdf&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=T1jFzuKLwyd6jtfyFVdtegd7Jo069I1Y6Cb2EIZv2Vo&e="https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf

 

Hth, 

 berx 

 

Juan Carlos Reyes Pacheco <HYPERLINK "mailto:***@gmail.com"***@gmail.com> schrieb am Fr., 29. Juni 2018, 18:04:

Please,I can't unwrap an old 9i wrapped function

 

currently there are tools for 10g onward wrapped procedures.

like HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=https-3A__www.codecrete.net_UnwrapIt_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=ZXNP_WLHB6vh89vYwTn1M_Wz97_qi8qrYcgJsLQjKyI&e="https://www.codecrete.net/UnwrapIt/

 

for old wrapped there are OracleUnWrapper.exe from softdream but is too expensive.

 

If someone know about a way to unwrap could you please send me :)

 

Thank you :)
Martin Berger
2018-06-29 17:16:39 UTC
Permalink
Jeff,
This doesn't help.
12c can still execute 9i-wrapped code.
And there is no unwrap/rewrap during the upgrade.
So even the DB is upgraded, the problem exists :(

sorry,
berx
Post by Jeff Smith
I don’t suppose getting rid of your 9g instance and getting into 12c is a possibility?
Or even an 11gR2 XE database?
*Sent:* Friday, June 29, 2018 1:04 PM
*Subject:* Re: I can't unwrap an old 9i wrapped function
Unfortunately I don't have a tool, but this presentation by Pete Finnigan
https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blackhat.com_presentations_bh-2Dusa-2D06_BH-2DUS-2D06-2DFinnigan.pdf&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=T1jFzuKLwyd6jtfyFVdtegd7Jo069I1Y6Cb2EIZv2Vo&e=>
Hth,
berx
Please,I can't unwrap an old 9i wrapped function
currently there are tools for 10g onward wrapped procedures.
like https://www.codecrete.net/UnwrapIt/
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.codecrete.net_UnwrapIt_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=ZXNP_WLHB6vh89vYwTn1M_Wz97_qi8qrYcgJsLQjKyI&e=>
for old wrapped there are OracleUnWrapper.exe from softdream but is too expensive.
If someone know about a way to unwrap could you please send me :)
Thank you :)
Jeff Smith
2018-06-29 17:18:37 UTC
Permalink
There are several known ways to unwrap a stored procedure.

 

They stated they found a way, but wouldn’t work on 9.

 

My point, no one should still be on 9 at this point. It’ll be easier no matter once you get up on something newer.

 

From: Martin Berger <***@gmail.com>
Sent: Friday, June 29, 2018 1:17 PM
To: Jeff Smith <***@oracle.com>
Cc: Juan Carlos Reyes Pacheco <***@gmail.com>; Oracle-L Freelists <oracle-***@freelists.org>
Subject: Re: I can't unwrap an old 9i wrapped function

 

Jeff, 

This doesn't help.

12c can still execute 9i-wrapped code. 

And there is no unwrap/rewrap during the upgrade.

 So even the DB is upgraded, the problem exists :( 

 

sorry, 

 berx

 

Jeff Smith <HYPERLINK "mailto:***@oracle.com"***@oracle.com> schrieb am Fr., 29. Juni 2018, 19:06:

I don’t suppose getting rid of your 9g instance and getting into 12c is a possibility?

 

Or even an 11gR2 XE database?

 

From: Martin Berger <HYPERLINK "mailto:***@gmail.com"***@gmail.com>
Sent: Friday, June 29, 2018 1:04 PM
To: Juan Carlos Reyes Pacheco <HYPERLINK "mailto:***@gmail.com"***@gmail.com>
Cc: Oracle-L Freelists <HYPERLINK "mailto:oracle-***@freelists.org"oracle-***@freelists.org>
Subject: Re: I can't unwrap an old 9i wrapped function

 

Unfortunately I don't have a tool, but this presentation by Pete Finnigan will be a good starting point: 

HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blackhat.com_presentations_bh-2Dusa-2D06_BH-2DUS-2D06-2DFinnigan.pdf&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=T1jFzuKLwyd6jtfyFVdtegd7Jo069I1Y6Cb2EIZv2Vo&e="https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf

 

Hth, 

 berx 

 

Juan Carlos Reyes Pacheco <HYPERLINK "mailto:***@gmail.com"***@gmail.com> schrieb am Fr., 29. Juni 2018, 18:04:

Please,I can't unwrap an old 9i wrapped function

 

currently there are tools for 10g onward wrapped procedures.

like HYPERLINK "https://urldefense.proofpoint.com/v2/url?u=https-3A__www.codecrete.net_UnwrapIt_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=N2hWu5HFsaIjmMkjQbnlokJ7uinNZMgPVk8rqPT9esM&m=n8OjSEM09yxYSXILFhtu9MQb5psSEFrQhUeBMk2p0jk&s=ZXNP_WLHB6vh89vYwTn1M_Wz97_qi8qrYcgJsLQjKyI&e="https://www.codecrete.net/UnwrapIt/

 

for old wrapped there are OracleUnWrapper.exe from softdream but is too expensive.

 

If someone know about a way to unwrap could you please send me :)

 

Thank you :)
Michael D O'Shea/Woodward Informatics Ltd
2018-06-29 17:47:56 UTC
Permalink
This thread and the books and blogs of many respected contributors to this forum and elsewhere often make me ask what is legal and what is (depending on your jurisdiction) illegal software reverse engineering.

The OTN Oracle DB Licence a few moments ago:

[You may not] cause or permit reverse engineering (unless required by law for interoperability), disassembly or decompilation of the Programs; and

IANAL but there is clearly a fine line between outright hacking & software (encoding algorithm or technology) reverse-engineering and normal Oracle technology usage, irrespective of whether the underlying code is yours, Oracle’s, or yours and wrapped inside the DB using Oracle IP, know-how, and algorithms.

Pete’s business indemnity insurance premium must be very high :-)

Mike

http://www.strychnine.co.uk <http://www.strychnine.co.uk/>
https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf <https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf>
Hth,
berx
Please,I can't unwrap an old 9i wrapped function
currently there are tools for 10g onward wrapped procedures.
like https://www.codecrete.net/UnwrapIt/ <https://www.codecrete.net/UnwrapIt/>
for old wrapped there are OracleUnWrapper.exe from softdream but is too expensive.
If someone know about a way to unwrap could you please send me :)
Thank you :)
Juan Carlos Reyes Pacheco
2018-06-29 18:23:45 UTC
Permalink
I found fyunwrap_full
http://download1511.mediafire.com/x3oe4itwl4ag/clcej2r24d2n1xn/fyunwrap_full.zip
I had to install in a vmware one windows xp
I run and it decoded correctly
:)


2018-06-29 13:47 GMT-04:00 Michael D O'Shea/Woodward Informatics Ltd <
Post by Michael D O'Shea/Woodward Informatics Ltd
This thread and the books and blogs of many respected contributors to this
forum and elsewhere often make me ask what is legal and what is (depending
on your jurisdiction) illegal software reverse engineering.
- [You may not] cause or permit reverse engineering (unless required
by law for interoperability), disassembly or decompilation of the Programs;
and
IANAL but there is clearly a fine line between outright hacking & software
(encoding algorithm or technology) reverse-engineering and normal Oracle
technology usage, irrespective of whether the underlying code is yours,
Oracle’s, or yours and wrapped inside the DB using Oracle IP, know-how, and
algorithms.
Pete’s business indemnity insurance premium must be very high :-)
Mike
http://www.strychnine.co.uk
Unfortunately I don't have a tool, but this presentation by Pete Finnigan
https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Finnigan.pdf
Hth,
berx
Post by Juan Carlos Reyes Pacheco
Please,I can't unwrap an old 9i wrapped function
currently there are tools for 10g onward wrapped procedures.
like https://www.codecrete.net/UnwrapIt/
for old wrapped there are OracleUnWrapper.exe from softdream but is too expensive.
If someone know about a way to unwrap could you please send me :)
Thank you :)
Loading...