sqlmap/tamper/equaltolike.py at master · getcode2git/sqlmap · GitHub

43 lines (31 loc) · 1.11 KB

#!/usr/bin/env python

"""

See the file 'doc/COPYING' for copying permission

"""

import os

import re

from lib.core.common import singleTimeWarnMessage

from lib.core.enums import DBMS

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.HIGHEST

def dependencies():

singleTimeWarnMessage("tamper script '%s' is unlikely to work against %s" % (os.path.basename(__file__).split(".")[0], DBMS.PGSQL))

def tamper(payload, **kwargs):

"""

Replaces all occurances of operator equal ('=') with operator 'LIKE'

Tested against:

* Microsoft SQL Server 2005

* MySQL 4, 5.0 and 5.5

Notes:

* Useful to bypass weak and bespoke web application firewalls that

filter the equal character ('=')

* The LIKE operator is SQL standard. Hence, this tamper script

should work against all (?) databases

>>> tamper('SELECT * FROM users WHERE id=1')

'SELECT * FROM users WHERE id LIKE 1'

"""

retVal = payload

if payload:

retVal = re.sub(r"\s*=\s*", " LIKE ", retVal)

return retVal

Expand file tree