Get sql statements from an exe (no source code)

Question

I have an exe written in Delphi a decade or more ago, with no source code. It calls a ms sql database, maybe more than 1 to retrieve data. I have read only access to one of the databases, I don't have rights to run sql profiler on it.

Is there a way to get the sql calls that are being made like how fiddler does it for http requests. I'm hoping that there is an app that I can run.

Thank you.

Nope, if you don't have access to create a Extended Event, or similar, to capture the statements being run you'll have no idea. You'll need to speak to someone who does have that access. If anyone could access the statements being run against an instance, that would be a huge security risk. — Thom A
– Thom A ♦, Commented Jan 21, 2022 at 12:30
Run a trace (Profiler or Extended Events) on the SQL Server including batch_completed and rpc_completed events. Best to do that in a test system. — Dan Guzman
– Dan Guzman, Commented Jan 21, 2022 at 12:30
Create an environment where you have the necessary privileges to run the profiler, make a copy of your database in that environment and let your application target that testenvironment ... — derpirscher
– derpirscher, Commented Jan 21, 2022 at 12:32
@Larnu is there no application I can install on the computer that runs the exe to catch the network traffic and see the statement. — David
– David, Commented Jan 21, 2022 at 12:42
Yes, Profiler and Extended Events do that, @David ; you just need the permissions to set them up. Like I said, if anyone could just intercept the SQL statements from an application it would be a massive security risk. — Thom A
– Thom A ♦, Commented Jan 21, 2022 at 12:48

GuidoG · Accepted Answer · 2022-01-21 15:42:15Z

1

Older versions of Delphi store string properties inside the executable file, at the end of the file.
If the developers did not take action to obscure this, than chances are you can retrieve them there.

It is not always easy to read though, I opened an old delphi program here and searched for the text "select distinct" and this is what came up

some more queries I found, they are there but as I said, not easy to read.

edited Jan 21, 2022 at 15:42

answered Jan 21, 2022 at 15:36

GuidoG

12.3k6 gold badges59 silver badges102 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Get sql statements from an exe (no source code)

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related