sqlmap/tamper/unionalltounion.py

27 lines
532 B
Python
Raw Normal View History

2012-04-15 21:10:43 +04:00
#!/usr/bin/env python
"""
2012-07-12 21:38:03 +04:00
Copyright (c) 2006-2012 sqlmap developers (http://sqlmap.org/)
2012-04-15 21:10:43 +04:00
See the file 'doc/COPYING' for copying permission
"""
import re
from lib.core.enums import PRIORITY
__priority__ = PRIORITY.HIGHEST
def dependencies():
pass
2012-07-27 02:11:07 +04:00
def tamper(payload, headers):
2012-04-15 21:10:43 +04:00
"""
Replaces UNION ALL SELECT with UNION SELECT
Example:
* Input: -1 UNION ALL SELECT
* Output: -1 UNION SELECT
"""
2012-07-27 02:11:07 +04:00
return payload.replace("UNION ALL SELECT", "UNION SELECT") if payload else payload, headers