How to hide from UNIX strings - obfuscate or hide a literal or constant?
Hi,
I need to somehow pipe the password to a command and run some SQL, for example, something like echo $password | sqlplus -s system @query01.sql
To make it not so obvious, I decided to try out writing a small C program that basically just do echo $password. So now I just do x9.out | sqlplus -s system@query01.sql.
I understand it still is not a secure thing to do as someone can just run x9.out and knows the password. Anyway, the intent is to make is less obvious that I am echo'ing a password so I am more than happy with that for the time being as a start.
Unfortunately, as you can see if I do a strings of the x9.out file, it is quite obvious that the word hello stands out.
Can anyone please advise how I can somehow hide that word in the bushes ?
For example, maybe I can do a printf of the ASCII values of the word so that if anyone do a strings of it, it shows number instead of words.
Finally, eventually, I would want to put something more into the code so that it will be an array that stores a list of username+password, so that if I do x9.out user01 it prints the password of user01, x9.out user02 prints the password of user02 and so on. It will probably be wise that it prompts for a username/password before it allows me to display the information.
BTW, it would be nice if I can put the whole "echo $password | sqlplus -s system" string into the C program so that I only do x9.out @query01.sql so it hides the username and password. I don't see how that they can be done, maybe one of the gurus can advice how to do that.
Anyway for now, I just want to know how to hide from UNIX strings :-)
Last edited by newbie_01; 03-08-2014 at 05:41 AM..
Reason: Adding more info
Hello everyone,
i am new to unix and still learning about different commands. Can some one tell me how can i hide my directory name. For instance someone is logged in a directory named $ .
I've seen some people hiding their above path name by just one word or letter like $ in order to keep... (7 Replies)
Hi all
I am new to unix...... i am working on HP-UX
I like to know how to hide files and how to view hided files created
by other users also
please help me
Sireesha (1 Reply)
Hi everybody,
Do you know how to hide the text for interactive unix shell script? Just like the case for inputting password during logon.
Patrick (1 Reply)
Hi all,
i have a perl script for my users to run. My sys admin created an account for the users to log in and execute the script. They just type "perl myscript.pl" at the unix prompt to run it. Is there any way that i can hide my script? ,ie, do not allow my users to view the script. either... (5 Replies)
All,
In my script I am calling another script.. in that script I need to enter a password. Problem is that everyone is able to see the password when I enter that. Is there any way that when i enter that password it should not display or may look like *******.
Or if there any other way that I... (1 Reply)
hello everybody,
i would like to hide visibility of the folders , i.e. not to giving any physically visibility to any users . Is there any way to do it other than changing the permission and adding "." post folder name .
by changing the permission , we cann't do any activity , but have... (1 Reply)
Hi,
By reporting the process status with ps, any Unix user will see the command line arguments
#ps -ef
UID PID PPID C STIME TTY TIME CMD
lsc 13837 13825 0 May 11 pts/17 0:01 -ksh
oracle 4698 6294 0 12:00:40 ? 0:00 sqlplus -s system/manager
appluser 4229 4062 0 12:00:03... (2 Replies)
I'm listing the files in a particular directory using the ls command...
$ ls -ogh
total 9.4G
-rw-r--r-- 1 1.9G Nov 4 02:29 file1.tar
-rw-r--r-- 1 1.9G Nov 11 03:11 file2.tar
-rw-r--r-- 1 1.9G Nov 18 02:55 file3.tar
-rw-r--r-- 1 1.9G Nov 25 03:11 file4.tar
-rw-r--r-- 1 1.9G Dec 2 02:46... (3 Replies)
Hi,
I my unix we have one file that contains all the database credentials.
we are calling that file while connecting databse.
I need to hide that file....other user should not view that file.
How to do this. Please suggest me apart from permisstion(chmod) level suggestion.
Regards,... (3 Replies)
Discussion started by: rsivasan
3 Replies
LEARN ABOUT CENTOS
radsqlrelay
RADSQLRELAY(8) FreeRADIUS helper program RADSQLRELAY(8)NAME
radsqlrelay - relay SQL queries to a central database server
SYNOPSIS
radsqlrelay [-?] [-d sql_driver] [-b database] [-f file] [-h host] [-u user] [-P port] [-p password] [-1] [-x] file_path
DESCRIPTION
radsqlrelay tails a SQL logfile and forwards the queries to a database server. Used to replicate accounting records to one (central) data-
base, even if the database has extended downtime.
The SQL logfile is created by the rlm_sql_log module. The module must be configured in the radiusd server before you can use radsqlrelay.
OPTIONS
-? Print usage help information.
-d sql_driver
Driver to use: mysql, pg, oracle.
-b database
Name of the database to use.
-f file
Read password from file, instead of command line.
-h host
Connect to host.
-u user
User for login.
-P port
Port number to use for connection.
-p password
Password to use when connecting to server.
-1 One-shot mode: push the file to database and exit.
-x Turn on debugging.
file_path
The pathname of the SQL logfile to use.
NOTES
Oracle driver
The command "radsqlrelay -d oracle -b db.domain.tld sql-relay" reads the database description stored in $TNS_ADMIN/tnsnames.ora:
db.domain.tld =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = db.domain.tld)(PORT = 1521))
)
(CONNECT_DATA =
(SERVICE_NAME = <DB SID>)
)
)
SEE ALSO rlm_sql_log(5)AUTHOR
Nicolas Baradakis <nicolas.baradakis@cegetel.net>
19 June 2005 RADSQLRELAY(8)
03-08-2014
?