Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "archivelog mode - or not?"] [Next entry: "10g Release 2 for Windows is available"]

jDUL / DUDE (Database Unloading by Data Extraction) - an alternative to DUL



I have known about Kurt Van Meerbeek's tool DUDE for a few years now. The tool started as a private project of Kurt and Kugendran Naidoo and it was called jDUL. The project was at first hosted on sourceforge but never made it out into the world as an open source tool. I was lucky to have had sent to me a trial version a couple of years ago so I could have a play with it and see what it did. I was always impressed by Kurt's knowledge of the internals of Oracle and was also impressed with his version of a DUL tool.

DUDE can be used to extract data from database instances that cannot be started and that are effectively scrap. It can also be used as a fast method to extract data. I would not recommend this for production though as you are unlikely to be supported. As a crash recovery tool though it is a lifeline to some people.

Kurt has now started a site called ORA-600 to promote DUDE as jDUL is now known. There is a good introduction to DUDE on the front page of the site that includes a list of all of the features supported. It works with Oracle 8,8i,9i and 10g, the dictionary can be recreated, missing SYSTEM tablespaces can be dealt with, most data types are covered, whole tablespaces can be recovered, pl/sql, most major platforms are supported, chained, migrated rows, trailing NULL's and partitioned tables are supported. Version 2.0 will include IOT's LOBS and RAW's soon.

If you have a dig around Kurt's site, you will find a nice description of the tool, a history page and also details of the services offered. Miracle AS, Mogens company are the preferred resellers to contact if you need to hire this tool.

Kurt has also includes a nice paper DUDE 2.0 primer that details how DUDE can be used to extract data from your Oracle database.

It is possible to get a demo version from Kurt, follow the links on his site and use Kurt's security protections. You need to fill in a config file and run DUDE_PROBE.jar against your database and then it is possible to get a demo that will dump just two tablespaces DUDE and SYSTEM.

I have updated my Oracle Internals page to add details of Kurt's paper and I have also added an Internals section to my Oracle Security Tools page to include this tool.